3179f6675e4f8f3ffebbfec716b7c4f1b564c38929077211cea5cb337ea8fb6b

Analysis

max time kernel
96s
max time network
97s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
12/10/2024, 04:13

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3179f6675e4f8f3ffebbfec716b7c4f1b564c38929077211cea5cb337ea8fb6bN.exe
Size

55KB
MD5

8883251987d14a3c0f33338fa1de2650
SHA1

f1cd728dd9dd7036e5d566be945c49c1e7a39b1e
SHA256

3179f6675e4f8f3ffebbfec716b7c4f1b564c38929077211cea5cb337ea8fb6b
SHA512

1b90bf2bb0f4b7aa64efe86009f61449179a5da778f569f476fc360e29beca47925998215bb3114396776d6037149b9a1a488c7d38ed24992ba5dadb9a549111
SSDEEP

1536:DQpQ5EP0ijnRTXJdMOkUcKg6hXG9miExGu:DQIURTXJdMnNr6Mmmu

Score

3^/10

discovery

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	3179f6675e4f8f3ffebbfec716b7c4f1b564c38929077211cea5cb337ea8fb6bN.exe

C:\Users\Admin\AppData\Local\Temp\3179f6675e4f8f3ffebbfec716b7c4f1b564c38929077211cea5cb337ea8fb6bN.exe
"C:\Users\Admin\AppData\Local\Temp\3179f6675e4f8f3ffebbfec716b7c4f1b564c38929077211cea5cb337ea8fb6bN.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1484

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...