f2b426f9f527198dec5ce88633834cfc528bcabdff71f4efdb1c698c44101fe6

Analysis

max time kernel
95s
max time network
96s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
19/09/2024, 03:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f2b426f9f527198dec5ce88633834cfc528bcabdff71f4efdb1c698c44101fe6N.exe
Size

62KB
MD5

1bb13963c52f344aaf6604a4e333a800
SHA1

262b3d9d82188096254e1c219ba46690947b2b47
SHA256

f2b426f9f527198dec5ce88633834cfc528bcabdff71f4efdb1c698c44101fe6
SHA512

a6050c14d094e77056d6948faef30a55e82b8f6877ad3c351015fbfe799f7bba0da1dd4f84dff6ff5c8d0e32461cf77451dbb456820d07c44bf4e0af0a1bbb14
SSDEEP

768:/7BlpQpARFbhn54fmiy+3BVr54fmiy+3BV6nccccPY:/7ZQpApmi6nccFQ

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	f2b426f9f527198dec5ce88633834cfc528bcabdff71f4efdb1c698c44101fe6N.exe

C:\Users\Admin\AppData\Local\Temp\f2b426f9f527198dec5ce88633834cfc528bcabdff71f4efdb1c698c44101fe6N.exe
"C:\Users\Admin\AppData\Local\Temp\f2b426f9f527198dec5ce88633834cfc528bcabdff71f4efdb1c698c44101fe6N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3640

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3640-0-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/3640-1-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download