Analysis
- max time kernel
149s - max time network
148s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
- submitted
05/05/2026, 11:41
General
- Target DTLite1250-2433b.exe
- Size 50.0MB
- Sample260505-ntmavaev3t
- SHA256 e22024a58de56b3655d6be7e3b21703325a57e0dd920bd9611588f5e33bb5132
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Modifies registry class 19 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\DTLite1250-2433b.exe"C:\Users\Admin\AppData\Local\Temp\DTLite1250-2433b.exe"1⤵
- System Location Discovery: System Language Discovery
- Modifies registry class
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4488-0-0x0000000000900000-0x0000000003B00000-memory.dmp
memory/4488-1-0x0000000008540000-0x0000000008550000-memory.dmp
memory/4488-2-0x00000000086B0000-0x00000000086C2000-memory.dmp
memory/4488-3-0x0000000008530000-0x000000000853A000-memory.dmp
memory/4488-70-0x0000000008540000-0x0000000008550000-memory.dmp
memory/4488-71-0x000000000BEF0000-0x000000000BF28000-memory.dmp
memory/4488-72-0x000000000BEC0000-0x000000000BECE000-memory.dmp
memory/4488-73-0x000000000C6C0000-0x000000000C700000-memory.dmp
memory/4488-74-0x0000000008540000-0x0000000008550000-memory.dmp
memory/4488-75-0x000000000C8F0000-0x000000000C8F8000-memory.dmp
memory/4488-76-0x000000000D000000-0x000000000D008000-memory.dmp
memory/4488-77-0x000000000CF00000-0x000000000CF92000-memory.dmp
memory/4488-78-0x0000000004540000-0x0000000004660000-memory.dmp
memory/4488-79-0x000000000B610000-0x000000000B673000-memory.dmp
memory/4488-80-0x0000000008540000-0x0000000008550000-memory.dmp
memory/4488-81-0x0000000008540000-0x0000000008550000-memory.dmp
memory/4488-82-0x0000000008540000-0x0000000008550000-memory.dmp
memory/4488-85-0x0000000004540000-0x0000000004660000-memory.dmp
memory/4488-105-0x0000000004540000-0x0000000004660000-memory.dmp
memory/4488-107-0x0000000004540000-0x0000000004660000-memory.dmp