52e2b47766d73804cb68c97ea249f9eb34ccc05748af148d60abc5fb00fbb9c6

Analysis

max time kernel
149s
max time network
156s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
24/05/2026, 15:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
tmpngldt92r.exe
Size 8KB
Sample260524-stsvvahs4j
SHA256 52e2b47766d73804cb68c97ea249f9eb34ccc05748af148d60abc5fb00fbb9c6
MD5 9c7c3c467b7a83456685c9112e55acac
SHA1 b213c4776153c4edb4afe3314d9c63813bb15258
SHA512 c37daedc14823ee4bca17ee926c5b89ca4197bb53cce620dbaab3210f7b7e65ae42d97cfa2c6e525a70675d8ee01432b12df43df9c68ba203a28d3cb41e94207
SSDEEP 192:/CgCbdwYh87LpyUhUp8Hb6Gyt0YXGbeCaRdiXp:/CPtQhqHGyubeCa
TLSH
T14CF14B130D5431F2D996E07D81A2393FDAFB2A2A0FF73D239E41A4C79B01390F06A956
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	tmpngldt92r.exe

C:\Users\Admin\AppData\Local\Temp\tmpngldt92r.exe
"C:\Users\Admin\AppData\Local\Temp\tmpngldt92r.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2896

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads