144fde2ac7159cead11d680ca5b651e988da865cd78e2251dd6beccf372cb10c

Analysis

max time kernel
149s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
23/04/2026, 09:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
144fde2ac7159cead11d680ca5b651e988da865cd78e2251dd6beccf372cb10c.exe
Size 2.2MB
Sample260423-lyklpsht2t
SHA256 144fde2ac7159cead11d680ca5b651e988da865cd78e2251dd6beccf372cb10c
MD5 7a7cea870551405d556d22c0c6e7567c
SHA1 ba568c4a3f5d1124175e67a4407808ed8670efe6
SHA512 593393c70863bb0ab353d585bcf2e68102d041507431b74a70f2971521a81281d68a08d1e410a0c92b3851026b46176b111dbf79f748ac3cb6ea1df8ad6c2b82
SSDEEP 24576:Tbsd2LCZqY0TS/voZSy52PkJ4d8k/VC15rLyNQyTZm7RXC0E9If/doVcxQEuzfLP:TJ+ors8515IRT08ytoVJXZFChAQs
TLSH
T169B5BF23B003C0A2E1552AF262A61B786DB48B352C78C99BFBE0DD667C72532D77750D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	144fde2ac7159cead11d680ca5b651e988da865cd78e2251dd6beccf372cb10c.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2488	144fde2ac7159cead11d680ca5b651e988da865cd78e2251dd6beccf372cb10c.exe
2488	144fde2ac7159cead11d680ca5b651e988da865cd78e2251dd6beccf372cb10c.exe

C:\Users\Admin\AppData\Local\Temp\144fde2ac7159cead11d680ca5b651e988da865cd78e2251dd6beccf372cb10c.exe
"C:\Users\Admin\AppData\Local\Temp\144fde2ac7159cead11d680ca5b651e988da865cd78e2251dd6beccf372cb10c.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2488

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2488-0-0x0000000010000000-0x000000001003C000-memory.dmp

Download

memory/2488-5-0x0000000010000000-0x000000001003C000-memory.dmp