071ddaf1165620f9df5af823d2b22cd996c88ce298da28a5005d2b84debff5f9

Analysis

max time kernel
149s
max time network
133s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
08/05/2026, 00:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
071ddaf1165620f9df5af823d2b22cd996c88ce298da28a5005d2b84debff5f9.exe
Size 1.0MB
Sample260508-a5d7qact6x
SHA256 071ddaf1165620f9df5af823d2b22cd996c88ce298da28a5005d2b84debff5f9
MD5 3011913bda3fa28e1318f280c942ecc8
SHA1 15b5c21fa6c1f7c16978a65e555e338576a74f42
SHA512 2710594ab02af197bd50f32fee22b630d0ef281d752743e93db769fddf04c1dc81f1bff8737d28987f3d873d18ee20e98ee2cf4b0a346a177182a32e538e8a24
SSDEEP 24576:Z9R5kZ6HJ+uWRcZwJmSU/2ajjXhrp4w5a01Mnx:7kZl8SUdXpp4w5a08
TLSH
T1AD35491273F58139F2F30B706D79A2645A7EBCB15831C61F23D8690D1B71A81EA26B37
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	071ddaf1165620f9df5af823d2b22cd996c88ce298da28a5005d2b84debff5f9.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	071ddaf1165620f9df5af823d2b22cd996c88ce298da28a5005d2b84debff5f9.exe

C:\Users\Admin\AppData\Local\Temp\071ddaf1165620f9df5af823d2b22cd996c88ce298da28a5005d2b84debff5f9.exe
"C:\Users\Admin\AppData\Local\Temp\071ddaf1165620f9df5af823d2b22cd996c88ce298da28a5005d2b84debff5f9.exe"
1⤵
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:4988

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4988-0-0x0000000000230000-0x0000000000341000-memory.dmp

Download

memory/4988-1-0x00000000014A0000-0x0000000001504000-memory.dmp

Download

memory/4988-2-0x0000000001510000-0x0000000001574000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads