42e23b5a0fde78a0677c91043c9484aa6a9942fadf7e535a07104ff0dd501cb4

Analysis

max time kernel
147s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
27-09-2024 14:05

Target

42e23b5a0fde78a0677c91043c9484aa6a9942fadf7e535a07104ff0dd501cb4.exe
Size

14KB
MD5

a01098d1613b8c6ccfa8672afee378e4
SHA1

d4d5c59ce7201312f0f57208ce987fba05475f55
SHA256

42e23b5a0fde78a0677c91043c9484aa6a9942fadf7e535a07104ff0dd501cb4
SHA512

dd74aadaa4133aa48f1b5078c67ac01bbd1cf2d178ea60cb4c5f4c0f16c2f41d86cf03266159896157d525e6c3049d723ec3f26eaa076fe26c746129d3902c9e
SSDEEP

192:R+8C+EKS0O9ejYTDG8bcp4LldanieXubWyD9JEBkGxVXmqoNDRJw:RNVjYTDG8gp4BeXTyD3EnxdoN8

Score

3^/10

discovery

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

System Language Discovery

Processes:

42e23b5a0fde78a0677c91043c9484aa6a9942fadf7e535a07104ff0dd501cb4.exe

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	42e23b5a0fde78a0677c91043c9484aa6a9942fadf7e535a07104ff0dd501cb4.exe

C:\Users\Admin\AppData\Local\Temp\42e23b5a0fde78a0677c91043c9484aa6a9942fadf7e535a07104ff0dd501cb4.exe
"C:\Users\Admin\AppData\Local\Temp\42e23b5a0fde78a0677c91043c9484aa6a9942fadf7e535a07104ff0dd501cb4.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2224

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/2224-0-0x0000000074B91000-0x0000000074B92000-memory.dmp

Filesize
4KB

Download
memory/2224-1-0x0000000074B90000-0x000000007513B000-memory.dmp

Filesize
5.7MB

Download
memory/2224-2-0x0000000074B90000-0x000000007513B000-memory.dmp

Filesize
5.7MB

Download
memory/2224-3-0x0000000074B90000-0x000000007513B000-memory.dmp

Filesize
5.7MB

Download