1ffb1ba8b96c8733887db57e4d54fbbae65f8b35dce623fac86fdd54b4f48a16

Analysis

max time kernel
298s
max time network
277s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
27/04/2026, 12:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
189863.exe
Size 64KB
Sample260427-pr56lsbt7x
SHA256 1ffb1ba8b96c8733887db57e4d54fbbae65f8b35dce623fac86fdd54b4f48a16
MD5 364784a6f653df81b76424a39dba237b
SHA1 ea27f4abb3f1b9f2b348b3bd0b959289ebf1b81e
SHA512 2ae079d1f7fefe7cef0ff947b720c033b672048d6541e159f7d8be21f92baba51866f87dc09f5c009c8a6ea37dbd12c773c51daf5794ae3bc4a05e4782756e19
SSDEEP 768:/dZK96m5FIbOMR6guDLBttQUup7dEnfDmq04wAtJeiWJBGHoATAzsd:l+5FNP3BttQUup7dEnfDWyWJaoPQd
TLSH
T1C5538D13B99081BBC58306B1182B1B3E9AB7A9358264C653E794FD6EBC33565EE34348
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	189863.exe

C:\Users\Admin\AppData\Local\Temp\189863.exe
"C:\Users\Admin\AppData\Local\Temp\189863.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3076

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads