2df50cb65b96919a58f1d91eb82d0214e01c437461ec6adfde40a680def13963

Analysis

max time kernel
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
28/05/2026, 09:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2df50cb65b96919a58f1d91eb82d0214e01c437461ec6adfde40a680def13963.exe
Size 4.8MB
Sample260528-lr2lmsct2p
SHA256 2df50cb65b96919a58f1d91eb82d0214e01c437461ec6adfde40a680def13963
MD5 b2cbc4a4315b99bb8cf8dc48401175ca
SHA1 3ce829a1cd893b962156d76ff4b45cb6125e0ce2
SHA512 77cd5a0859477a357f10167d7023b0467f29d1a42f10874a5203e1f817e1cd27400a95e38cc794cf329af95b30f332662a13915af177976daf75e2ecd38b17d0
SSDEEP 98304:cxnWU9Tc549ukk4y4xSGkNG7VOLfqcdb9zSDzbu61t67FvI:cxW8cOEdcSGthQdbIW0e
TLSH
T18736E031F4218037DA5200729575BB3A89AA5EA1172994C7F3E43DA41F30BD327BB77A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2df50cb65b96919a58f1d91eb82d0214e01c437461ec6adfde40a680def13963.exe

C:\Users\Admin\AppData\Local\Temp\2df50cb65b96919a58f1d91eb82d0214e01c437461ec6adfde40a680def13963.exe
"C:\Users\Admin\AppData\Local\Temp\2df50cb65b96919a58f1d91eb82d0214e01c437461ec6adfde40a680def13963.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1228

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads