da606c96f050ddd44186166b5e658cc4214318bb16460cf61aed221d38e38f6c

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
05-10-2024 15:55

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

da606c96f050ddd44186166b5e658cc4214318bb16460cf61aed221d38e38f6c.exe
Size

97KB
MD5

75bafcc851a086147bcaf0db6bed22ed
SHA1

283067587d5ac7058f526502679f33b3d95fc07d
SHA256

da606c96f050ddd44186166b5e658cc4214318bb16460cf61aed221d38e38f6c
SHA512

02d52c413e24046c27a4a1c5d127c130cf2cdd029cd1721a3aa2b6b52e5c97bed0a2575a10ccb5d7570a46cc1969eb3aa96197dac3cc02ba3ce5b4adb4610d8d
SSDEEP

1536:rxBtQncPQ8ihAkOJDBNGePs1PIsumGTLXZrvCBj:r1fbvCl

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	da606c96f050ddd44186166b5e658cc4214318bb16460cf61aed221d38e38f6c.exe

C:\Users\Admin\AppData\Local\Temp\da606c96f050ddd44186166b5e658cc4214318bb16460cf61aed221d38e38f6c.exe
"C:\Users\Admin\AppData\Local\Temp\da606c96f050ddd44186166b5e658cc4214318bb16460cf61aed221d38e38f6c.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2804

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads