052ceb9f457ecb20794e3078c02f061989a8eb9c4d1acaf51415f8a6c68c6f9f

Analysis

max time kernel
149s
max time network
152s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
16/04/2026, 12:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-04-16_455f2dbe9c899332446fc2295a4aa8bd_elex_mespinoza.exe
Size 3.4MB
Sample260416-pyebgaav9w
SHA256 052ceb9f457ecb20794e3078c02f061989a8eb9c4d1acaf51415f8a6c68c6f9f
MD5 455f2dbe9c899332446fc2295a4aa8bd
SHA1 9c2e929f7d7dddd1735705e26c49730658850bec
SHA512 f3d627c675fba9e50dea96fc258d615baf7f98713bf6abef99c5745ce9981ad50ef5fecb81d6df7c57a868d44cb03d363f1d2ac3c58ce850285fff8f41fbd0ca
SSDEEP 49152:ncY/qsNBk9/fw2BwfmM0fG/4MnYYJ2ZhqSGLHkJEM:cLsNi9XwgwfobIDQ
TLSH
T1E2F5C4036500AB32C95C527035D0E9AB1DD17EE199135DA73386BEEFFABBE9117C1222
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-04-16_455f2dbe9c899332446fc2295a4aa8bd_elex_mespinoza.exe

C:\Users\Admin\AppData\Local\Temp\2026-04-16_455f2dbe9c899332446fc2295a4aa8bd_elex_mespinoza.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-16_455f2dbe9c899332446fc2295a4aa8bd_elex_mespinoza.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:5144

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads