8c67ffd1ed5c941315d225a2e826eb06d8d0bdfbb3aa36f18d559588cda7331e

Analysis

max time kernel
149s
max time network
95s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
15/04/2026, 16:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-04-15_84a28d4daf0f0a24acf20b8d9eaeda5a_elex_mespinoza.exe
Size 1.2MB
Sample260415-tgxtpsft3v
SHA256 8c67ffd1ed5c941315d225a2e826eb06d8d0bdfbb3aa36f18d559588cda7331e
MD5 84a28d4daf0f0a24acf20b8d9eaeda5a
SHA1 4542f02c3d2a1a98aa31e69683e0788d22b76489
SHA512 a58ff391ec1c5e560ff77df89240cbc733395eeda63c60e6e7c7f6731fc9f0beb5224d332719b3b15cbbae000e613b158f46a7c717f8ef91e7b40749f5e479d7
SSDEEP 24576:z/DrNDS5lSAiXVav9Mk+BsbSAOidYrovp4Tp9aQCoGsXHRL:zrrNDS5lS6v9MtBMO+YrovpU/9L
TLSH
T176557B323E70C5BED51ED1F57A6FA2ADD165BD3086F0450B23762F78BFB11A00A2521A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-04-15_84a28d4daf0f0a24acf20b8d9eaeda5a_elex_mespinoza.exe

C:\Users\Admin\AppData\Local\Temp\2026-04-15_84a28d4daf0f0a24acf20b8d9eaeda5a_elex_mespinoza.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-15_84a28d4daf0f0a24acf20b8d9eaeda5a_elex_mespinoza.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3480

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads