7e38a07e04a2fbbb07a8037d4c3ccfaf0812273158d139bf060f2f1acbc78a97

Analysis

max time kernel
93s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
05/09/2024, 06:31

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5c6b46cbd5ba092d28848f97e46d01b0N.exe
Size

57KB
MD5

5c6b46cbd5ba092d28848f97e46d01b0
SHA1

20dd6021e01eb0e8e8bc31236d605305b944a10e
SHA256

7e38a07e04a2fbbb07a8037d4c3ccfaf0812273158d139bf060f2f1acbc78a97
SHA512

d50475e9d61c18565b43ab55705d991b50849c85e93ea19103f91aa3f4bf1be384fa835c66717cd5282ac002cb0d6fecc8df980b0a8cd34ae69977691a67e882
SSDEEP

1536:oV/GrlhiYZBZoKSFRPt7g9uM4qUKw1Melfi4Pe:jrlhiYZw1FLlMovlfvP

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	5c6b46cbd5ba092d28848f97e46d01b0N.exe

C:\Users\Admin\AppData\Local\Temp\5c6b46cbd5ba092d28848f97e46d01b0N.exe
"C:\Users\Admin\AppData\Local\Temp\5c6b46cbd5ba092d28848f97e46d01b0N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2368

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2368-0-0x0000000001000000-0x0000000001012000-memory.dmp

Filesize
72KB

Download
memory/2368-1-0x0000000001000000-0x0000000001012000-memory.dmp

Filesize
72KB

Download