df9a20022998c7ac11af23fc69f5d42698ed187b4d03b75fa911570c648d9642

Analysis

max time kernel
93s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
11-09-2024 14:43

Target

install/Aut2Exe/Aut2exe.exe
Size

1.3MB
MD5

88d518a90f4187b4542618cd328d7a34
SHA1

fa5fd671f8aabce769f82b960634d54c4a27e502
SHA256

5affc1a22d87715d5da70bfddb081335ca0a382b9cc4a54e18263047a76d5d81
SHA512

a1ed751ba7518dcb2cf9ab821fa28690d8f4a41238e4b8d97b37c00eef5662147dea600c90a7192142808f6668f8d252372e0712415d0fb7b9d1faa53b2b7769
SSDEEP

24576:k30RJ529+RipvL1SXk1QE1RGOTnIEQc4au9NgxnHNnz:kE89+ApwXk1QE1RzsEQPaxHNz

Score

3^/10

discovery

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
discovery

System Language Discovery
T1614.001

Processes:

Aut2exe.exe

description ioc process

Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Aut2exe.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Aut2exe.exe

C:\Users\Admin\AppData\Local\Temp\install\Aut2Exe\Aut2exe.exe
"C:\Users\Admin\AppData\Local\Temp\install\Aut2Exe\Aut2exe.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1968

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact