80c3f23a08b7961f77803845e6131460430edf21a33f55401ca4423b94dc8936

Analysis

max time kernel
100s
max time network
101s
platform
windows10-2004_x64
resource
win10v2004-20240910-en
resource tags

arch:x64arch:x86image:win10v2004-20240910-enlocale:en-usos:windows10-2004-x64system
submitted
01/10/2024, 08:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

80c3f23a08b7961f77803845e6131460430edf21a33f55401ca4423b94dc8936N.exe
Size

138KB
MD5

f5b2bdfffc7a677d801cd0feedcaca40
SHA1

30cdb491495e1f5b89b9fc06a174ab78c4bcb5df
SHA256

80c3f23a08b7961f77803845e6131460430edf21a33f55401ca4423b94dc8936
SHA512

fa9a1b19cf64292424952240e8d1dfa2be4d0ebe1f2f09b9b6e4b481a808fed9b09a04b4e2e4944c5385fe4243a1b60fa0fdd67fd69e998b8c04be993ee8e7f7
SSDEEP

1536:W5Xl2kR/yKOyEDJKLnXCAUkQzWH52I7gJ6DHk7VSoVOWw:+lCQCTyH52I66DHA3VO

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	80c3f23a08b7961f77803845e6131460430edf21a33f55401ca4423b94dc8936N.exe

C:\Users\Admin\AppData\Local\Temp\80c3f23a08b7961f77803845e6131460430edf21a33f55401ca4423b94dc8936N.exe
"C:\Users\Admin\AppData\Local\Temp\80c3f23a08b7961f77803845e6131460430edf21a33f55401ca4423b94dc8936N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1252

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...