3418a32a51104129f7b6a03c18ef6e2989108fe6552c49a81f56fe61ea6522c4

Analysis

max time kernel
430s
max time network
431s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
06-10-2024 09:32

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

DR4eat.exe
Size

477KB
MD5

ea0711812c4f773da344e725a843712f
SHA1

82e87f6097e423306934a1319ef6d5191b05636b
SHA256

478b3048a9b82c42c029083a6cf8ef0a012147e8901a3272c3882da838c47aa6
SHA512

60a9bdb837af84dbfa6a761d297ffb3c7f9cd93989067e1d3b707885b5e34d5823e2aa006e727dd3b519a100494c8bfbc9a07ddd1f6015575d00937eaa208c66
SSDEEP

12288:Wa5KxDkM/ByYqzQsPjC/2pzYvsuTgEV11fIUWs:WNaM/QYqzQsPjC/mzWRgyN

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	DR4eat.exe

C:\Users\Admin\AppData\Local\Temp\DR4eat.exe
"C:\Users\Admin\AppData\Local\Temp\DR4eat.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3400

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads