ca1c849035c31f8ca132aedfe93e4d3b32c18c90740c7626862b871ff7c249d9

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
11/09/2024, 17:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

MyUpdate.exe
Size

164KB
MD5

edf43c9b1525b9bd245f05c80e33a65c
SHA1

48d7b90ae691d7d6999bf0ab96ce368a622cd079
SHA256

10ce1f36924c9f01a6686e61cf6ca85b1bbc6c267ffe9c5833a0340d94a61321
SHA512

17613bee0f6a3ac1697ef6ce2fe5bde2670c1a81b0993608c83daeaa619eb30c0318a55c77323c02e33778ce33b98bbec4063eaf8f3ca225a6433ba4ea1d5d26
SSDEEP

3072:Y/bM5xy2gRdZQ+2GGV3IjWJ3/c1Gfm+WdAd/zSMB3FhI:u7xZQ+CV3ICJ3Eum+SWGMBI

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MyUpdate.exe

C:\Users\Admin\AppData\Local\Temp\MyUpdate.exe
"C:\Users\Admin\AppData\Local\Temp\MyUpdate.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3536

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads