6c5a2e705dfae3e52afe439d04c35849ae6d2231302fc3315ef301cbd2393ea8

Analysis

max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
07/05/2026, 03:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
6c5a2e705dfae3e52afe439d04c35849ae6d2231302fc3315ef301cbd2393ea8.exe
Size 5.9MB
Sample260507-ee8e4aew3w
SHA256 6c5a2e705dfae3e52afe439d04c35849ae6d2231302fc3315ef301cbd2393ea8
MD5 f21f9b53007d096f4a306d4eaec490e3
SHA1 108844f0ca113ec221a7469c31e73cda84cf30a4
SHA512 3c9bf2d3ea4c1be0183476c3313d0c28b402cc0475dffbb1003a4ab9cdd39e5b55680986152d076037a65d3d84c62eb908b899d282ab04e76f4b0a2f280725e7
SSDEEP 98304:o4/1dpPvtDbhxA3UKV4tq0inZLZyhab2DtxGzwikZBW9bee+I5jwCNtQ0o1F4VKr:oe1/Jw3UKV4tqPZ0DtWbkZB21v5jw8tG
TLSH
T16D563382E548F423CCAD12780DD698722B2ADF1C2761C75D33697F6426BB767BB07026
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	6c5a2e705dfae3e52afe439d04c35849ae6d2231302fc3315ef301cbd2393ea8.exe

C:\Users\Admin\AppData\Local\Temp\6c5a2e705dfae3e52afe439d04c35849ae6d2231302fc3315ef301cbd2393ea8.exe
"C:\Users\Admin\AppData\Local\Temp\6c5a2e705dfae3e52afe439d04c35849ae6d2231302fc3315ef301cbd2393ea8.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4084

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4084-0-0x00000000007F0000-0x000000000080A000-memory.dmp

Download