71971d782125679e1c4d528e1ffdba435e92c570cf22690a83fe9cb0fca5bfeb

Analysis

max time kernel
149s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20250129-en
resource tags

arch:x64arch:x86image:win10v2004-20250129-enlocale:en-usos:windows10-2004-x64system
submitted
06-02-2025 08:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f792059834427eb907c412d0a0efd0c599126088779bcf2daa9762af55d0d97e.exe
Size

469KB
MD5

cb21cf3e8992ce458ad2e763ecc2a8e0
SHA1

3d233e2b782da7135dda6a07dd835ddbb70152a4
SHA256

f792059834427eb907c412d0a0efd0c599126088779bcf2daa9762af55d0d97e
SHA512

896e2833fa2b31ae086c1680c8bd53a5aee2bd45ab614bea0e62703086b756ab43aee328dfe77b2659059ccd096a37963ccf6185ecb28651082f296d514b6a1e
SSDEEP

12288:Wmnk7iLJbpIpiRL6I2WhSKQ9ZsfZQSTn9:uiLJbpI7I2WhQqZ7T9

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	f792059834427eb907c412d0a0efd0c599126088779bcf2daa9762af55d0d97e.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1244	f792059834427eb907c412d0a0efd0c599126088779bcf2daa9762af55d0d97e.exe

C:\Users\Admin\AppData\Local\Temp\f792059834427eb907c412d0a0efd0c599126088779bcf2daa9762af55d0d97e.exe
"C:\Users\Admin\AppData\Local\Temp\f792059834427eb907c412d0a0efd0c599126088779bcf2daa9762af55d0d97e.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:1244

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\ProgramData\ios\logs.dat

Filesize
144B

MD5
9db5906f34ef4b0bef47a6906b1ebc82

SHA1
4eae5d12cf1c628fd7e8af96cf04f4a4942927ba

SHA256
41e9bac1d0191a74c2f89f139d16920c2ffdbfe4a35ed95efdd25b69ed1949f3

SHA512
2a71603fba37571e97c669b6a376c5f634b9aff41ab5612537bab012707c38ebabac5cdfc23625a2c8d7fda2e2e62bb2e69c4f7a77958a7d2baedd5a74497784

Download Submit