84ba766b1f292df812017d9c8549bd1026fbdd12b3eabe0e9ad491774f175ab8

Analysis

max time kernel
133s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
22-10-2024 18:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Bind/GetAV.exe
Size

63KB
MD5

c370f62105bf4e23ed840df1de7da9f4
SHA1

1200781e796bedde8957dd782156cee9a2e5302e
SHA256

79fc2ed2a2ee782a061405fcd52929f7d2603da3ee3c9c6755a07558e6789565
SHA512

5358d7ad82b217e21994f808a4fb75a287f4e0edb35209c58fc28d41dee36b9910102821bdd43a85cd849041b26afade757c5a182710181f3d1841b6638b4048
SSDEEP

768:1cpamL9gchqW0VVPL5UITZTjTzaLUodCPZE2lRtuiQ5dwsGCbCb:aLcW+lUITF/4UWCLRtuiQ5CqCb

Score

6^/10

discovery

Malware Config

Signatures

Checks for any installed AV software in registry 1 TTPs 2 IoCs

Security Software Discovery

T1518.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Eset\NOD\CurrentVersion\Info	GetAV.exe
Key opened	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira	GetAV.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	GetAV.exe

C:\Users\Admin\AppData\Local\Temp\Bind\GetAV.exe
"C:\Users\Admin\AppData\Local\Temp\Bind\GetAV.exe"
1⤵
- Checks for any installed AV software in registry
- System Location Discovery: System Language Discovery
PID:2444

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Software Discovery

T1518

Security Software Discovery

T1518.001

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads