Resubmissions
11/05/2026, 08:54
260511-kt178ady5z311/05/2026, 08:12
260511-j3z6vagx9j308/05/2026, 12:43
260508-px53sscx2m708/05/2026, 12:35
260508-psq33sg18y7Analysis
- max time kernel
898s - max time network
899s - platform
windows11-21h2_x64 - resource
win11-20260130-de - resource tags
- submitted
11/05/2026, 08:54
General
- Target payload_decrypted.exe
- Size 533KB
- Sample260511-kt178ady5z
- SHA256 c43f546c1628260debda8501ac9e5782e6ea1095d474fe48c4dfc5a7ca9373f9
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\payload_decrypted.exe"C:\Users\Admin\AppData\Local\Temp\payload_decrypted.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3368-0-0x00000000002D0000-0x000000000035C000-memory.dmp
memory/3368-1-0x0000000004ED0000-0x0000000004EE0000-memory.dmp
memory/3368-2-0x0000000005000000-0x0000000005076000-memory.dmp
memory/3368-3-0x0000000005260000-0x000000000532A000-memory.dmp
memory/3368-4-0x0000000005370000-0x00000000053A2000-memory.dmp
memory/3368-5-0x0000000005460000-0x00000000054AC000-memory.dmp
memory/3368-6-0x0000000005520000-0x0000000005586000-memory.dmp
memory/3368-7-0x0000000005B00000-0x0000000005C04000-memory.dmp
memory/3368-9-0x0000000004ED0000-0x0000000004EE0000-memory.dmp
memory/3368-8-0x0000000005080000-0x0000000005141000-memory.dmp
memory/3368-39-0x0000000005080000-0x0000000005141000-memory.dmp
memory/3368-68-0x0000000005080000-0x0000000005141000-memory.dmp