774ca28a2a18a58313346fb9500af9f26809f9f9c6aab8f7c5251f5963cc0e21

Analysis

max time kernel
148s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/06/2026, 03:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
774ca28a2a18a58313346fb9500af9f26809f9f9c6aab8f7c5251f5963cc0e21.exe
Size 509KB
Sample260630-ea5teaev6r
SHA256 774ca28a2a18a58313346fb9500af9f26809f9f9c6aab8f7c5251f5963cc0e21
MD5 988b0b1e2097c2e8ce68a960e64ffb58
SHA1 7117c13b0a058c68f094d115227204035bf3aaec
SHA512 98b2b2a513c6069ff12529f59cb91f9f0aa09a322d6c1203825f8deb186d882df8dbcf207ebaad82c4121a527699f274ac38746ac9f88a8176b8911740e9ffca
SSDEEP 12288:Lmnk7iLJbpIpiRL6I2WhSKQ9ZsfZQSZn9:JiLJbpI7I2WhQqZ7Z9
TLSH
T165B4AE02BAD2C072D57161344D2AE735DABDBC212835997BB3E61D5BFD30180A73A7B2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	774ca28a2a18a58313346fb9500af9f26809f9f9c6aab8f7c5251f5963cc0e21.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1372	774ca28a2a18a58313346fb9500af9f26809f9f9c6aab8f7c5251f5963cc0e21.exe

C:\Users\Admin\AppData\Local\Temp\774ca28a2a18a58313346fb9500af9f26809f9f9c6aab8f7c5251f5963cc0e21.exe
"C:\Users\Admin\AppData\Local\Temp\774ca28a2a18a58313346fb9500af9f26809f9f9c6aab8f7c5251f5963cc0e21.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:1372

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

logs.dat

Path C:\ProgramData\remcos\logs.dat
Size 144B
SHA256 55bf72e1177035f667668e59b6763179cbfb017a6803ec5ce01c136ecff4579d
MD5 19e9e68e5b899d512b1c32ce1083245a
SHA1 e8921060c3048df4e6774fd73ee15c4c97c98adc
SHA512 3e2513f7482b06f48edcac0d30243a82218b15ce15a0c46391749b8f24a22b5a69c7950bda591ec656fe61bd6425d48f3a39fedc17bc85c9f306f7b9bb6a6179
TLSH
T13EC09B5533D5101F7D72729654B300367B71FD55103CD80D51D2034C05F19045180797
MD5 SHA1 SHA512 TLSH

Submit Download