cd1cbe7a354110d6577621d668bf63014da7cd4a07685108089fa89bc46db88b

Analysis

max time kernel
92s
max time network
93s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
05-10-2024 13:44

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

cd1cbe7a354110d6577621d668bf63014da7cd4a07685108089fa89bc46db88bN.exe
Size

468KB
MD5

0c61c6240ea5dd30e8bada7374ea5100
SHA1

1e439a52bb5cab8a032261afc132b757e396f949
SHA256

cd1cbe7a354110d6577621d668bf63014da7cd4a07685108089fa89bc46db88b
SHA512

ac762c5c0c99303dc0232c335f5210a0693dc72265ec43b4dd2b252612d13640fc7f4c1365c7dc1c137bd8a3910aa6da9313467a91ca37e8995d5b1d5563f3ce
SSDEEP

3072:HFIlogBYjp8Ti4Y4PMuRkf8/ZCiWQIpyPmHD2TKwO/JUggz1OflB:HF+oL6TimPTRkf+0hcO/mJz1O

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cd1cbe7a354110d6577621d668bf63014da7cd4a07685108089fa89bc46db88bN.exe

C:\Users\Admin\AppData\Local\Temp\cd1cbe7a354110d6577621d668bf63014da7cd4a07685108089fa89bc46db88bN.exe
"C:\Users\Admin\AppData\Local\Temp\cd1cbe7a354110d6577621d668bf63014da7cd4a07685108089fa89bc46db88bN.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:740

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/740-0-0x0000000000400000-0x0000000000475000-memory.dmp

Filesize
468KB

Download
memory/740-1-0x0000000000400000-0x0000000000475000-memory.dmp

Filesize
468KB

Download