4da6d05310e71458b83159152f8094594eff425a9c3c0830ff74b9922108b0a5

Analysis

max time kernel
95s
max time network
96s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
19-09-2024 05:39

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

$0/basicscan.exe
Size

22KB
MD5

c53701b0ea1686ed864cc825cb13ff6a
SHA1

ff9f6a51e65f884ef12d693c4e33dd0dc5cad459
SHA256

84da7167f1c24fdf704a738b9d57af721f3220dab7af53f15db0c284f6c1e7fc
SHA512

21c5848dcd6da08f657cb3679b36fd64fe244a4f507ede46bf71d9845e56dfac3932e9553232155b07a25a0d45f257d607af71d52b636be449ae0067f6d1aa52
SSDEEP

384:GLvOJQod6RiV1wJDIgPURCblLV5107wna/llLRuY3vJml:2Om6/XwJDnFRh5107wnmzLYisl

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	basicscan.exe

C:\Users\Admin\AppData\Local\Temp\$0\basicscan.exe
"C:\Users\Admin\AppData\Local\Temp\$0\basicscan.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4964

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads