54bc0d9144ea3de6c51570acc1092ae43e9670c2ab3344eaaeceb20c33659517

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
05-12-2024 16:49

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

1733417286fc3e005fb672367f368896a7f5540f9ccbc4a8fc3e0e3c0df2cd0e1387254b67938.dat-decoded.exe
Size

481KB
MD5

18b19eb6e39e3adf169b3aa5a625e05c
SHA1

6999f3901fa4abbfb158bf2bf842a7711aef6928
SHA256

54bc0d9144ea3de6c51570acc1092ae43e9670c2ab3344eaaeceb20c33659517
SHA512

55da8eb5daa6d2f6abe4b8a43a8b55ffd6674e0b098fc52c4b29a2d2058c9b695e4f0b90d10caf1627173dfd5d34e37b0f9ceecb105299f63ecc2447055ff85a
SSDEEP

12288:buD09AUkNIGBYYv4eK13x13nZHSRVMf139F5wIB7+IwtHwBtVxbesvZDSV9+DY:e09AfNIEYsunZvZ19Z+9s

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	1733417286fc3e005fb672367f368896a7f5540f9ccbc4a8fc3e0e3c0df2cd0e1387254b67938.dat-decoded.exe

C:\Users\Admin\AppData\Local\Temp\1733417286fc3e005fb672367f368896a7f5540f9ccbc4a8fc3e0e3c0df2cd0e1387254b67938.dat-decoded.exe
"C:\Users\Admin\AppData\Local\Temp\1733417286fc3e005fb672367f368896a7f5540f9ccbc4a8fc3e0e3c0df2cd0e1387254b67938.dat-decoded.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:5032

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads