d2547b43c345b1ab6ce4dd012f156f9c95679cff782ea025388226eb3af1aee7

Analysis

max time kernel
119s
max time network
121s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
14-10-2024 20:26

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d2547b43c345b1ab6ce4dd012f156f9c95679cff782ea025388226eb3af1aee7N.exe
Size

4KB
MD5

d9b3e801fe884efa53a12249af781b90
SHA1

63d910b61341599cbff78236137619d5500d06cd
SHA256

d2547b43c345b1ab6ce4dd012f156f9c95679cff782ea025388226eb3af1aee7
SHA512

b4a6d9ef9c68cf8a6dd2752cef6af1e628a1a49c86b1d642846c463f863e9ecd0165b7fe721ac466ea09af17280a17f0ce0f341cc8afd79ae68b44c2a1843f6a
SSDEEP

96:LrIdSLQPZARC3dCE8Y0Jw5NL6EVwHHKg2:vswdRCNCE8YPWowHHK7

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	d2547b43c345b1ab6ce4dd012f156f9c95679cff782ea025388226eb3af1aee7N.exe

C:\Users\Admin\AppData\Local\Temp\d2547b43c345b1ab6ce4dd012f156f9c95679cff782ea025388226eb3af1aee7N.exe
"C:\Users\Admin\AppData\Local\Temp\d2547b43c345b1ab6ce4dd012f156f9c95679cff782ea025388226eb3af1aee7N.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3296

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3296-0-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/3296-1-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download