6d5d64c0f43b0b8e18d22022f684b77df0c107b13045e78996f24d54a2339b2d

Analysis

max time kernel
94s
max time network
100s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
14/09/2024, 14:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

aba901b29bdc935d099a2d0c641c3230N.exe
Size

77KB
MD5

aba901b29bdc935d099a2d0c641c3230
SHA1

6814750b3afe95c2a04f135ad1c0a445f047bec6
SHA256

6d5d64c0f43b0b8e18d22022f684b77df0c107b13045e78996f24d54a2339b2d
SHA512

8257ab9db5efb0dea032ea7043f9c9cd0b14f9ab10be4ad43a77efbd46bddaced29fefc2ed425bbdeaaff297ec6b49177db107a2253e64e9d243af2b3613da29
SSDEEP

384:yBs7Br5xjL8AgA71FbhvJUfWGUfpa4ma4LGXnlGXn801E5c5Jd:/7BlpQpARFbhiWbWYZuE5c5D

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	aba901b29bdc935d099a2d0c641c3230N.exe

C:\Users\Admin\AppData\Local\Temp\aba901b29bdc935d099a2d0c641c3230N.exe
"C:\Users\Admin\AppData\Local\Temp\aba901b29bdc935d099a2d0c641c3230N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4132

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4132-0-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/4132-1-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download