da5c7a39fb7ad7c202df887847de783624f46b7724a871b15efab3aa6f349e6c

Analysis

max time kernel
149s
max time network
94s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
15/04/2026, 11:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
da5c7a39fb7ad7c202df887847de783624f46b7724a871b15efab3aa6f349e6c.exe
Size 1.2MB
Sample260415-ncdmdacv8k
SHA256 da5c7a39fb7ad7c202df887847de783624f46b7724a871b15efab3aa6f349e6c
MD5 a819a5fb730c4926d5359e2f18b0d719
SHA1 3a1c8377479e92586a9bf4ac1e26db73e103f5a7
SHA512 21a1251eea484db9a2c0ef06d2e5270edfa98f65f264e0b2bf8f7dc5f20513c05a34d1f24df620a0e864aec2ea5c4c1f092f0c17509b4c74367faba30dacee30
SSDEEP 12288:D8YZ4XjgcliQ+MlHraKR33QCSw40F4FHvElMoSvNVUZ:D8YjyiQ1lLaIH540F4FPElmK
TLSH
T1CA45AE62F1C284F2C10415311AF6673ADA74B7875B2C9FC3A3A4DE7D9D26580DA3B22D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	da5c7a39fb7ad7c202df887847de783624f46b7724a871b15efab3aa6f349e6c.exe

C:\Users\Admin\AppData\Local\Temp\da5c7a39fb7ad7c202df887847de783624f46b7724a871b15efab3aa6f349e6c.exe
"C:\Users\Admin\AppData\Local\Temp\da5c7a39fb7ad7c202df887847de783624f46b7724a871b15efab3aa6f349e6c.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1428

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1428-0-0x0000000000400000-0x000000000052A000-memory.dmp

Download