aad7920ad447b408cd6fd44b6fb0aeeef7ef92fc2aacd6153f52b7da0002b1b3

Analysis

max time kernel
149s
max time network
94s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
08/05/2026, 08:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
aad7920ad447b408cd6fd44b6fb0aeeef7ef92fc2aacd6153f52b7da0002b1b3.exe
Size 1.4MB
Sample260508-kbabsaex5s
SHA256 aad7920ad447b408cd6fd44b6fb0aeeef7ef92fc2aacd6153f52b7da0002b1b3
MD5 1f5ecdaaceb85865617bda7c0bb94427
SHA1 4a0748dd276a845aa045566263fa7863928bfa4c
SHA512 3576a5f78540876745b822a8ef4f4eef99560cc4c1dce368edbf61d11ecab5f192ebbf1b3056784d14239e9b52e2b9671a7eaee86b605343818cb45d05560f19
SSDEEP 24576:rgled5oBiwXxVirnlBUKZ408vTZrX+lgdW:Ul25EiwXiLlBUKubZrX+ld
TLSH
T1D765BD0637F80969F8F3AE7058749F25A63BBC359D34EB6E2290214D1D34A91E931B73
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	aad7920ad447b408cd6fd44b6fb0aeeef7ef92fc2aacd6153f52b7da0002b1b3.exe

C:\Users\Admin\AppData\Local\Temp\aad7920ad447b408cd6fd44b6fb0aeeef7ef92fc2aacd6153f52b7da0002b1b3.exe
"C:\Users\Admin\AppData\Local\Temp\aad7920ad447b408cd6fd44b6fb0aeeef7ef92fc2aacd6153f52b7da0002b1b3.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4660

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4660-0-0x0000000000400000-0x0000000000602000-memory.dmp

Download

memory/4660-1-0x0000000000400000-0x0000000000602000-memory.dmp