6c803e725233cd4527dcc8b6867cbafe7882735e5f759bd6bbcce5be4312b7b4

Analysis

user interaction
yes
max time kernel
300s
max time network
122s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/06/2026, 03:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Video_iPhone_2026-05_27.mp4 Drive.google_patched.exe
Size 1.1MB
Sample260623-eetxpsh14r
SHA256 6c803e725233cd4527dcc8b6867cbafe7882735e5f759bd6bbcce5be4312b7b4
MD5 f4b1938a0d108c83d04b50e3e16da4d5
SHA1 62b6fd3815e7cfaf710cf84fa9787fc48cbaf8bb
SHA512 a611399bea02c76481a03446ca276ccc4b2d630d3967698b8fada64f9ed206e6cf377745290e350b5be7a5cae4322723b4c9a46a17ba285c853045b96029745e
SSDEEP 24576:laE+hTNrCHtLfTfuM7Djr5QpYrao2rupZrOHMBSiSW4ndc:R+MRdOHg4u
TLSH
T1E2355C26A387D03EE06907360D62A66844FB7E946422AF07B5D4BC9DFE3515C2D3E633
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery installer

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Video_iPhone_2026-05_27.mp4 Drive.google_patched.exe

Inno Setup is an open-source installation builder for Windows applications. 2 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral4/memory/3900-1-0x0000000000FE0000-0x0000000001109000-memory.dmp	innosetup
behavioral4/memory/3900-2-0x0000000000FE0000-0x0000000001109000-memory.dmp	innosetup

C:\Users\Admin\AppData\Local\Temp\Video_iPhone_2026-05_27.mp4 Drive.google_patched.exe
"C:\Users\Admin\AppData\Local\Temp\Video_iPhone_2026-05_27.mp4 Drive.google_patched.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3900

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3900-1-0x0000000000FE0000-0x0000000001109000-memory.dmp

Download

memory/3900-2-0x0000000000FE0000-0x0000000001109000-memory.dmp