1181cd065415775a2e20766fcadc5a4b911ffaf7e0ec2a2526fce9330783b990

Resubmissions

27/11/2024, 05:53

241127-gljresxlek 10

Analysis

max time kernel
425s
max time network
434s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
27/11/2024, 05:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

driver-x64.exe
Size

42.3MB
MD5

a80358074cd82f92ffd7ea48c9ed9804
SHA1

f46c3b0fd3cd2ecd1373f00a23213e3f8dcc80ab
SHA256

1c2fc56c21981dc35350bc7d8f3a734b737e4454ef7f1302382fff00045aed86
SHA512

f9a4e9527932011b62b0ff5852afdf69d2f86c9e64d0c761f0935005da51a23a626a10a8eff7e29bdbcc2711f6345fed12f708215f2687459fa5e3e9763ce00a
SSDEEP

786432:1DSIbLKlthJD4YWxH5f13kwvH82V+b7eNcX/I4SmRehSuzdi1mq67PUEA1h2:trw54t15f1zvHhV4lPIAReq1mjmh2

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	driver-x64.exe

C:\Users\Admin\AppData\Local\Temp\driver-x64.exe
"C:\Users\Admin\AppData\Local\Temp\driver-x64.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:404

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/404-1-0x0000000000400000-0x000000000051A000-memory.dmp

Filesize
1.1MB

Download
memory/404-2-0x0000000000401000-0x00000000004B7000-memory.dmp

Filesize
728KB

Download
memory/404-3-0x0000000000400000-0x000000000051A000-memory.dmp

Filesize
1.1MB

Download