7da893d1061d53820df739a6917d18c2ad891e479c926bd7f0e1b2c33b696463

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
14-09-2024 21:09

Target

7da893d1061d53820df739a6917d18c2ad891e479c926bd7f0e1b2c33b696463.exe
Size

1.1MB
MD5

7440694cba7601b5c1cbf10e1a71bf5d
SHA1

c9110e7984ed98854de7becf58c29223f321cdb4
SHA256

7da893d1061d53820df739a6917d18c2ad891e479c926bd7f0e1b2c33b696463
SHA512

ac7649a3566231385515e0fa313d6f2a5a979ae13558dd4b5d3b60a1c3061bfbb9673384221758eebdd7fe6ed052c4c6213e4ed6c2dfd284923208f673b3c65f
SSDEEP

24576:He3zGCOTGJZSSJubrZ2ZIPJvEtzBNEHPgKav0wz:+3zGgZikoJOzBavfaDz

Score

3^/10

discovery

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

System Language Discovery

Processes:

7da893d1061d53820df739a6917d18c2ad891e479c926bd7f0e1b2c33b696463.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	7da893d1061d53820df739a6917d18c2ad891e479c926bd7f0e1b2c33b696463.exe

C:\Users\Admin\AppData\Local\Temp\7da893d1061d53820df739a6917d18c2ad891e479c926bd7f0e1b2c33b696463.exe
"C:\Users\Admin\AppData\Local\Temp\7da893d1061d53820df739a6917d18c2ad891e479c926bd7f0e1b2c33b696463.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1920

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/1920-0-0x00000000749CE000-0x00000000749CF000-memory.dmp

Filesize
4KB

Download
memory/1920-1-0x0000000000870000-0x000000000098A000-memory.dmp

Filesize
1.1MB

Download
memory/1920-2-0x00000000749C0000-0x00000000750AE000-memory.dmp

Filesize
6.9MB

Download
memory/1920-3-0x00000000749C0000-0x00000000750AE000-memory.dmp

Filesize
6.9MB

Download