e71230bd86a814c31d05817813bfdf7054cd5ceb941a4b8b0083a0c25c01bd68

Analysis

max time kernel
149s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
01/06/2026, 17:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
e71230bd86a814c31d05817813bfdf7054cd5ceb941a4b8b0083a0c25c01bd68.exe
Size 122KB
Sample260601-vrvmrscy8j
SHA256 e71230bd86a814c31d05817813bfdf7054cd5ceb941a4b8b0083a0c25c01bd68
MD5 0bad64327fb5652b63bbb686df084769
SHA1 8cdce0fe2f8bf5fc24d6523bad4365b36618291b
SHA512 e5c6ac8de5ecb00d17a3f3e66febb911b9db719e85107d4b92be2d92e53989c0da1b3b7974a2e85de18b99ac5313f2937201ba4c63c4a0cd1451ecfcea53a3d8
SSDEEP 768:IwrQKfgMdWwLVu1ExjI+uYa1vI7FFYIKhTNCoXwUU3f3iypak6Bf:rrQOrhI4Oc/KhT3Xw/fSwak6Bf
TLSH
T18CC35F4067F85451FAB36B3995FA82651739FEA58EA1C70F8508362D4833ED0EDA2337
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	e71230bd86a814c31d05817813bfdf7054cd5ceb941a4b8b0083a0c25c01bd68.exe

C:\Users\Admin\AppData\Local\Temp\e71230bd86a814c31d05817813bfdf7054cd5ceb941a4b8b0083a0c25c01bd68.exe
"C:\Users\Admin\AppData\Local\Temp\e71230bd86a814c31d05817813bfdf7054cd5ceb941a4b8b0083a0c25c01bd68.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3156

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3156-0-0x0000000000B20000-0x0000000000B3A000-memory.dmp

Download