32e35bf1ae587b0d0100d339cc2b9e45d3a4ddeb0d82099291f21be5fea2fe4b

Analysis

max time kernel
149s
max time network
114s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
22/04/2026, 18:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
DriverInstaller32.exe
Size 140KB
Sample260422-w4e9aaas6x
SHA256 32e35bf1ae587b0d0100d339cc2b9e45d3a4ddeb0d82099291f21be5fea2fe4b
MD5 914ded5e145527f6fa37ee8d38b7ded8
SHA1 2ca3de7d91232e722388d4cfabe36ef18e27ab7e
SHA512 932485950bf19876312da6546308128967f7e021e5f4d35a3d8aab72c0bfa03d9e6d5a9ac77e4b3235fff88da9ed9e9eeecbd0132f295cbac344e0ea533357e8
SSDEEP 3072:4PuzJsTzBKHfXivPZiwwBW4csLGSGlerHpDFUhsV4xFEu9Sn:4PiJ+K6JiwwBW4NLlGlerHpDFUW6en
TLSH
T1C1E3AE73B64F843AF09013B159646FE692BAFC351F2503D323A8B36E4A391D61E32656
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	DriverInstaller32.exe

C:\Users\Admin\AppData\Local\Temp\DriverInstaller32.exe
"C:\Users\Admin\AppData\Local\Temp\DriverInstaller32.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1180

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads