a911c4ccdce4249da4ac03f2168a3ec14daf9cfc00fc6383702cd7daa0e79eac

Analysis

max time kernel
93s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
27/09/2024, 04:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a911c4ccdce4249da4ac03f2168a3ec14daf9cfc00fc6383702cd7daa0e79eacN.exe
Size

468KB
MD5

288ade228d0e39dd6f5e537a932e3310
SHA1

e8a84d7cda1e506dda4e0233ba9f3c243aa88da2
SHA256

a911c4ccdce4249da4ac03f2168a3ec14daf9cfc00fc6383702cd7daa0e79eac
SHA512

7af7a18bc209541c6395cb95f399d11039d02eb90bdfeaa6e71dfd851e6857005d3ac9b2e52389406acffc8dd0d48ed9e3a639f1e68f4e9fd6765b9fbe7a3551
SSDEEP

3072:qACHovUuUB5ntbYAPgt5Of8/E5RhDQXzHmHdxStXS12wQ84u0sls:qAWoCnntLPM5OfFe6mS1rF4u0

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	a911c4ccdce4249da4ac03f2168a3ec14daf9cfc00fc6383702cd7daa0e79eacN.exe

C:\Users\Admin\AppData\Local\Temp\a911c4ccdce4249da4ac03f2168a3ec14daf9cfc00fc6383702cd7daa0e79eacN.exe
"C:\Users\Admin\AppData\Local\Temp\a911c4ccdce4249da4ac03f2168a3ec14daf9cfc00fc6383702cd7daa0e79eacN.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1320

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...