709d4a2c6b1307768277cbcafa383579d5ef81eeb0845532a1f1b01168e6ea10

Analysis

max time kernel
122s
max time network
128s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
26-11-2024 02:41

Target

709d4a2c6b1307768277cbcafa383579d5ef81eeb0845532a1f1b01168e6ea10.exe
Size

29KB
MD5

472277a6072a8cfa733117ff1597c8da
SHA1

83e570c6eca17446ac0b8418f11fa25b9c5c10a7
SHA256

709d4a2c6b1307768277cbcafa383579d5ef81eeb0845532a1f1b01168e6ea10
SHA512

de7c9fce7211a5628c3793df5632835f3c5588949549504243cc90182fb754cb09961ef303c6b0e77124ae04a231e7a7207c8eb966f868144c249104215467fe
SSDEEP

384:piY/4mcwYPSNOjKjg11+rVlOxxtNP97kJkgQ8pwIIumVbgORBprjlJZpTJ3uPbH0:piWWjjKjrOFgwItmVsOlr1B+90H

Score

7^/10

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

System Language Discovery

Processes:

709d4a2c6b1307768277cbcafa383579d5ef81eeb0845532a1f1b01168e6ea10.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	709d4a2c6b1307768277cbcafa383579d5ef81eeb0845532a1f1b01168e6ea10.exe

C:\Users\Admin\AppData\Local\Temp\709d4a2c6b1307768277cbcafa383579d5ef81eeb0845532a1f1b01168e6ea10.exe
"C:\Users\Admin\AppData\Local\Temp\709d4a2c6b1307768277cbcafa383579d5ef81eeb0845532a1f1b01168e6ea10.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2368