46f02a65f8b4b2439e0672931de2b7092e6330a597d904f1d3508225c426dfb2

Analysis

max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
01/06/2026, 07:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
46f02a65f8b4b2439e0672931de2b7092e6330a597d904f1d3508225c426dfb2.exe
Size 227KB
Sample260601-jvrvhae151
SHA256 46f02a65f8b4b2439e0672931de2b7092e6330a597d904f1d3508225c426dfb2
MD5 cda351949aa54dd422b066e92d7b0809
SHA1 dec00b09cf17edd4b44f1717449a744ff9a05405
SHA512 2a5f1c3735965057f29fab3ea6fd7e6332a781c1a32c53845a7ab2af6e6d0c02c4d65d8dce6144043d74d587b71de9817f23ecaf36c3d32add4a23b7706534dc
SSDEEP 3072:wbRBxl5NBHt8g4S2NvGcStPgg7xmwaY46tGNFC0VFAaxnLy1:6xl5Ndyg0vwtPggN46tGfC0jAt
TLSH
T134348D66B9C0F873C02319B88E05C6E6BD293E701D19486BB5EE1F4DDF7A1C2261D29D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Drops file in Drivers directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\system32\drivers\etc\hosts	46f02a65f8b4b2439e0672931de2b7092e6330a597d904f1d3508225c426dfb2.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	46f02a65f8b4b2439e0672931de2b7092e6330a597d904f1d3508225c426dfb2.exe

C:\Users\Admin\AppData\Local\Temp\46f02a65f8b4b2439e0672931de2b7092e6330a597d904f1d3508225c426dfb2.exe
"C:\Users\Admin\AppData\Local\Temp\46f02a65f8b4b2439e0672931de2b7092e6330a597d904f1d3508225c426dfb2.exe"
1⤵
- Drops file in Drivers directory
- System Location Discovery: System Language Discovery
PID:4060

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4060-0-0x0000000000400000-0x000000000043F000-memory.dmp

Download

memory/4060-2-0x0000000000400000-0x000000000043F000-memory.dmp