ac9056f90d9c5138d400dc1d2423a4e752c2fe49cd8c56b549d409b0ab3b7b7e

Analysis

max time kernel
100s
max time network
104s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
18/10/2024, 01:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

ac9056f90d9c5138d400dc1d2423a4e752c2fe49cd8c56b549d409b0ab3b7b7eN.exe
Size

40KB
MD5

2a5d1e4b9517f050474a09cb4d686b80
SHA1

33194f97d84a094037292e93330668af7ed4c94d
SHA256

ac9056f90d9c5138d400dc1d2423a4e752c2fe49cd8c56b549d409b0ab3b7b7e
SHA512

1497e430bf0ddf14f696f7da1c80f2fce14b05ac959533b9a28dab27e6726033a7ae581ebd2634fb670d8aa277c470819b5e9b5e1936d6fcab691d4457007ebc
SSDEEP

768:n8bfCcZ+6EE6hGIqi06LeChWg8lFBAWwLzYioRoKqRGQVJ:nW6kGxKg8F75oK8G2J

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ac9056f90d9c5138d400dc1d2423a4e752c2fe49cd8c56b549d409b0ab3b7b7eN.exe

C:\Users\Admin\AppData\Local\Temp\ac9056f90d9c5138d400dc1d2423a4e752c2fe49cd8c56b549d409b0ab3b7b7eN.exe
"C:\Users\Admin\AppData\Local\Temp\ac9056f90d9c5138d400dc1d2423a4e752c2fe49cd8c56b549d409b0ab3b7b7eN.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4744

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4744-0-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download
memory/4744-1-0x0000000000400000-0x0000000000410000-memory.dmp

Filesize
64KB

Download