8004261822a2836e3f076ba20d0989acd92b589ac372d8e14d5618510f43213b

Analysis

max time kernel
149s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
22/05/2026, 12:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
dfu-util-static.exe
Size 274KB
Sample260522-pgx29ads8v
SHA256 8004261822a2836e3f076ba20d0989acd92b589ac372d8e14d5618510f43213b
MD5 7f3b67a8ffd9a7e8b58a4ad7708a0e85
SHA1 f88fa268448c20aabbabe5bb81acbf6339bf0814
SHA512 32f2754b8e17d53f11df4de85b123dde29244c3506b7a8fe0414c59189393097da8974e439c4a6487df9231d61fd4e47e66f0c049b9670477fe13e4343177dae
SSDEEP 6144:OH8B4tphrJn57zwcL3dY3gpsjz11CW49yj:OycFv7rsjzuW3j
TLSH
T12E545C73B7C1DCAAD81202B44A56C7722738F2F01223DB0BD66444355F27AC6AFF5A69
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	dfu-util-static.exe

C:\Users\Admin\AppData\Local\Temp\dfu-util-static.exe
"C:\Users\Admin\AppData\Local\Temp\dfu-util-static.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4508

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4508-0-0x0000000000400000-0x0000000000445000-memory.dmp

Download