0d43acbb159687bdfda23da84ae785677f0a4c14010be48ead657d2b71a359bd

Analysis

max time kernel
92s
max time network
96s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
08-10-2024 16:51

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

MP2PLoader.exe
Size

65KB
MD5

84b293f20d8902ecd5987f964c4f3f81
SHA1

377d768081d84ad3c9b8f6a21fa6a54a0c9efc90
SHA256

97123ab632a0c339b6d629edee88d85afc3b89782f68c5d18a7409f266b68c4d
SHA512

a0318b41216b2a0a8b712ab3a307826d27752ceba3a006737dca011322196771d5c34adaf341813757664f5437986f2a9f081ffa73e0ef8a64cfc2f05b44b558
SSDEEP

1536:GYTUKKNc+y9nmvhjGLESJsQaN2Mf3QWmL:G7umvhKLQ3QWmL

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MP2PLoader.exe

C:\Users\Admin\AppData\Local\Temp\MP2PLoader.exe
"C:\Users\Admin\AppData\Local\Temp\MP2PLoader.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3060

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads