cb0ba29bc5ca1fd1bc65c803ff48b2a221ca2c352931575215f1b057b2b1e7f2

Analysis

max time kernel
141s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
21-12-2024 15:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

cb0ba29bc5ca1fd1bc65c803ff48b2a221ca2c352931575215f1b057b2b1e7f2.exe
Size

122KB
MD5

ddff2e746f4acbc2555053a9bbc382fd
SHA1

0d4cb63249764fa4b2cbac6fe4032ec26cd9e829
SHA256

cb0ba29bc5ca1fd1bc65c803ff48b2a221ca2c352931575215f1b057b2b1e7f2
SHA512

ea719a9063fccc0609f3e381b10636d61e320ddf6c968b5957cda31638beb6f90c4a1422733ff4a14e100721cc4b94b3074807f4e0718b2229d45b90ef2a04f5
SSDEEP

1536:u5iTkEfcvYa5yWBOdu3ysyJCbrVkrLfxpwLkdugPisb:/QEfcX5yWStLwgF9

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cb0ba29bc5ca1fd1bc65c803ff48b2a221ca2c352931575215f1b057b2b1e7f2.exe

C:\Users\Admin\AppData\Local\Temp\cb0ba29bc5ca1fd1bc65c803ff48b2a221ca2c352931575215f1b057b2b1e7f2.exe
"C:\Users\Admin\AppData\Local\Temp\cb0ba29bc5ca1fd1bc65c803ff48b2a221ca2c352931575215f1b057b2b1e7f2.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3728

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3728-0-0x0000000000400000-0x0000000000422000-memory.dmp

Filesize
136KB

Download