52ce2b431c99609f6728ca99402317e318d4f4e792c0457ae38907096421242c

Analysis

max time kernel
92s
max time network
97s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
01-10-2024 17:20

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

搞机工具箱V9.01/fastboot.exe
Size

1.6MB
MD5

9115da43b8bb91915b74b60071cd39a0
SHA1

71be52ad570373e89e4728c587e8b32baa4ff858
SHA256

b6e698ef159d2b305d1f5dbdcddc0841ac5e85608f775c104466e9915060d26d
SHA512

1a51e586bb9ae5f0fe76a9edbb361d1f61555e38a5a09ffec7242a26fbaf412877b7a86aff8058e462e6238ce720c3dd49ce5ff49c4f4f3875c76e5ed2ded250
SSDEEP

49152:yuOKNgyawTqCcfWqCcBqCcJeiOjT08hm3:/NgzwICeiOEl

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	fastboot.exe

C:\Users\Admin\AppData\Local\Temp\搞机工具箱V9.01\fastboot.exe
"C:\Users\Admin\AppData\Local\Temp\搞机工具箱V9.01\fastboot.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3860

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads