4c9acf9fa885bf772564bfaa6771b776b45d0e8daa3ce0bf89b05f4d87085686

Analysis

max time kernel
94s
max time network
136s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
22-12-2024 00:27

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

dxdllreg.exe
Size

78KB
MD5

967240f77a123434ce212ed77276dea1
SHA1

ac1ff591a5ba91b382578fb9f9b38d2de6379bf6
SHA256

b6f134915bac6d630adb04d69f6944462bf5adfce2182f2908c2fb1bdd2da2fb
SHA512

30efe2e1e3e8221a0b368eec5a7e030efb04fd3f4f9d3f678d0eb2f7af1c5d5484d8bd7c8bcfd0bf349b87a34e6d779e7966fe004c7defa12eee4a33bc51af07
SSDEEP

1536:c3yqLKmzPYxsbQwTu9pS7OOC8c4aEuW/jGboizXyz36WBAOMhowYkrgHB3DSSSS7:wyqLKmzPYxt9PJh4aEuWKbx7WmDhDgHF

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\Logs\DirectX.log	dxdllreg.exe
File opened for modification	C:\Windows\Logs\DXError.log	dxdllreg.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	dxdllreg.exe

C:\Users\Admin\AppData\Local\Temp\dxdllreg.exe
"C:\Users\Admin\AppData\Local\Temp\dxdllreg.exe"
1⤵
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
PID:4204

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Windows\Logs\DXError.log

Filesize
467B

MD5
dfbfa677cd5a2e034bfe69308c5e0498

SHA1
b12c7a52df679624c296e0e03e6123471b1d6021

SHA256
b9a04271f47abf651fd120daae437cef79cb8a7d5225c96bcfbacc3d28d86ee0

SHA512
cc7920bb676123997b3e4c319fce36353ce645b666c5e95e222546cf1974ff012cb512ade5d84c6ebe19a8da7c66f5cd45c886129ccda4c13dff64f1b4fa56e2

Download Submit
C:\Windows\Logs\DirectX.log

Filesize
595B

MD5
0ce738a57103a38d22e38adc108ee732

SHA1
3a06469b56745e9b4905ec9d5f4d44324875cc4a

SHA256
cf9e40abd005b15fdf78354db5ce8f8dedf14474425bd3c4de24b80fa948568c

SHA512
34fa32ada1cf86ea0a587e2e275aa6db5d11568bd6959e6d9c4e6b6c058fc61994450ac71ac2ec189e6b9027badbfd9dac7c26cb257b930d529b8783c7ba810b

Download Submit