ace23d9b32808dab344a789974e47484c4b171911f0946b05073c2cb6ae9e376

Analysis

max time kernel
148s
max time network
122s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260617-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/06/2026, 02:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Replay.exe
Size 2.1MB
Sample260620-dfd27ses3y
SHA256 ace23d9b32808dab344a789974e47484c4b171911f0946b05073c2cb6ae9e376
MD5 20b4cd4260a0e367decf6aadf1a8738f
SHA1 603863c926b5d23319af7c341cb7fd697ef7b2e1
SHA512 0b9ef37ff4c02e864b6c7d648b0faef150b2c45827798f5d2d22096274d01fa130eaa61fea8d1d7c76ede9de089aa8600f441b5d7cf537bc4b80fe2c8555da45
SSDEEP 49152:AeBXMLjIBP5VQXfvQ/qpyr0k3ixzubPHJjXSnkuTYfRZ:AeBXMLjIBPEPvQ/qpyr0k3KuJjXT
TLSH
T18AA5BE22FB8280B3D4820274516BA77B8936AF505735D5EF97D03D69CE321C1AB3E3A5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Replay.exe

C:\Users\Admin\AppData\Local\Temp\Replay.exe
"C:\Users\Admin\AppData\Local\Temp\Replay.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1388

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads