68ebc4ceaa2954e14494a81480f5f9d24eb73009b05d6a42b247f43cab904d32

Analysis

max time kernel
95s
max time network
96s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
06-10-2024 03:26

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

68ebc4ceaa2954e14494a81480f5f9d24eb73009b05d6a42b247f43cab904d32N.exe
Size

36KB
MD5

cb9921a5951d9b9a52cda02800c7b510
SHA1

553690ac0b288ec4743609774a1bf64001cd3dcf
SHA256

68ebc4ceaa2954e14494a81480f5f9d24eb73009b05d6a42b247f43cab904d32
SHA512

0fdc8de5a598482e38f7430f54c0c6203f56b11ff432a6a4389ed63dbf84b9f671a35646c82978172ced0491828f7f02c852d9e90f2fd407870dd323b02da6f3
SSDEEP

768:j5f3/Qn5mu8nhOhqlBJHfcRrRAob2m8tJeQGPL4vzZq2o9W7GsxBbPr:Nf3/Qn5mu8hOhm3Hk9mm8rlGCq2iW7z

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	68ebc4ceaa2954e14494a81480f5f9d24eb73009b05d6a42b247f43cab904d32N.exe

C:\Users\Admin\AppData\Local\Temp\68ebc4ceaa2954e14494a81480f5f9d24eb73009b05d6a42b247f43cab904d32N.exe
"C:\Users\Admin\AppData\Local\Temp\68ebc4ceaa2954e14494a81480f5f9d24eb73009b05d6a42b247f43cab904d32N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1848

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1848-0-0x0000000000A40000-0x0000000000A4E000-memory.dmp

Filesize
56KB

Download
memory/1848-1-0x0000000000A40000-0x0000000000A4E000-memory.dmp

Filesize
56KB

Download