8e9e418d5aa4ae80ff90caccd0e9d6b998bb495315cfa7f68d23d2b69398c755

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/07/2026, 04:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
8e9e418d5aa4ae80ff90caccd0e9d6b998bb495315cfa7f68d23d2b69398c755.dll
Size 6.9MB
Sample260702-e2nn7sbx5z
SHA256 8e9e418d5aa4ae80ff90caccd0e9d6b998bb495315cfa7f68d23d2b69398c755
MD5 761e9d32e97b59b96ff01de37209febb
SHA1 e5feda723c90ebbf5b3592b99253e7296de7e918
SHA512 a8202c69be95e437158519158c3f3899719aab8dd2957eddf77e0651586f42d6b85fdc5d622239c745b93be1c314996425b3209bb22346a011e0a425aa2ffecf
SSDEEP 98304:ioDoEGjcedLDNlHNRwWvXyI9w9K9r9cYlVc6QzVc6jDfy19MXbov1XbovF:iCkpEWvXyI6A9yYlVc9zVcSDqvMi1i
TLSH
T15476F13676818077D01A83304E19F279E0BEBD702B7592C7B7F4BA1D2934CC75A259A7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 3212 wrote to memory of 2028	3212	rundll32.exe	84

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\8e9e418d5aa4ae80ff90caccd0e9d6b998bb495315cfa7f68d23d2b69398c755.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3212
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\8e9e418d5aa4ae80ff90caccd0e9d6b998bb495315cfa7f68d23d2b69398c755.dll,#1
  2⤵
  - System Location Discovery: System Language Discovery
  PID:2028

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads