f486b1afa796299cbc4a64d48f8695961d0aa0577eed526e5ea50c71f27400d2

Analysis

max time kernel
149s
max time network
93s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
16/04/2026, 22:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
_f486b1afa796299cbc4a64d48f8695961d0aa0577eed526e5ea50c71f27400d2.exe
Size 18KB
Sample260416-2ln2csct6q
SHA256 f486b1afa796299cbc4a64d48f8695961d0aa0577eed526e5ea50c71f27400d2
MD5 3ee1e26b6e75423732de7cdb0acc9f00
SHA1 46b4b772334db5433478e84d5864cc63a82e4cce
SHA512 e73f652be91b684782badae5977c03fe7a383c6e0ee5aeddc8cbfe59a9922e2dfed837f7adc86a3e6e5291f4c4e7074cbfe3b7803a9011c864388632ec61d4c9
SSDEEP 384:wI78VGQic1Kwzw077u9NHu/gBhav8U9cR:hAo0769Zha0U+
TLSH
T14F824B0FB9424216D0D200B49A76867BD97998B637C814EBF7D08AEE1B686D1FC3315F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	_f486b1afa796299cbc4a64d48f8695961d0aa0577eed526e5ea50c71f27400d2.exe

C:\Users\Admin\AppData\Local\Temp\_f486b1afa796299cbc4a64d48f8695961d0aa0577eed526e5ea50c71f27400d2.exe
"C:\Users\Admin\AppData\Local\Temp\_f486b1afa796299cbc4a64d48f8695961d0aa0577eed526e5ea50c71f27400d2.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1108

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads