bdcbb3d5cbc637db8e3027c414d37e8c39960e1cfbbf7e11d9398019af3afa6a

Analysis

max time kernel
120s
max time network
121s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
26-11-2024 01:27

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

bdcbb3d5cbc637db8e3027c414d37e8c39960e1cfbbf7e11d9398019af3afa6a.exe
Size

7KB
MD5

c0d42ac11dee9b76375bc7dc84e7cd6c
SHA1

b661fefae80500372f505a0990914a2863afe929
SHA256

bdcbb3d5cbc637db8e3027c414d37e8c39960e1cfbbf7e11d9398019af3afa6a
SHA512

2ab2566dd41317c33ab47b29e12eed720323efcdd6beb0d5ec9beb824fa4619f7b771407bc44f2110081924b35663b3abe1908d6e07c917a7ac81f4bb959bd36
SSDEEP

192:7vBJqAPhpeS1ZK8O3CDHdbzM60lkwiRKEi:NUAPo2M3lke7

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

Processes:

bdcbb3d5cbc637db8e3027c414d37e8c39960e1cfbbf7e11d9398019af3afa6a.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	bdcbb3d5cbc637db8e3027c414d37e8c39960e1cfbbf7e11d9398019af3afa6a.exe

C:\Users\Admin\AppData\Local\Temp\bdcbb3d5cbc637db8e3027c414d37e8c39960e1cfbbf7e11d9398019af3afa6a.exe
"C:\Users\Admin\AppData\Local\Temp\bdcbb3d5cbc637db8e3027c414d37e8c39960e1cfbbf7e11d9398019af3afa6a.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4812

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads