6cd5134758561cccc5c313f8bf90c09bbeafdcd4a67ba0c8bb36d82b588f863e

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/07/2026, 04:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
6cd5134758561cccc5c313f8bf90c09bbeafdcd4a67ba0c8bb36d82b588f863e.dll
Size 237KB
Sample260702-e2scdsh19r
SHA256 6cd5134758561cccc5c313f8bf90c09bbeafdcd4a67ba0c8bb36d82b588f863e
MD5 32afe8353a6bfa92a9ef3ecfe91e28f5
SHA1 fe8e15ec62c24e59f6617094bed57ef7054f81be
SHA512 a6593a35979431a99f9e29bb2b2a5f60c47c2176b2fcad6bc7a69c297345d13ecf5e3d5904af8e8761085831df779e4881dd8a330d3b4ae9207e9da30d98cd90
SSDEEP 3072:Dq/30JIVJ00azQuG5oTN6HzuQeQwBozvBThnpYaQXiCOP0Y2AEAg0FuSj/hCUUY:woQOEqQe2LPniaQXNY2AEAOzI
TLSH
T1AC34AE417581D4B3D9BE11350828DB39097D7C200FA1DDEFABE45E7E4E362C1AA31A7A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 724 wrote to memory of 464	724	rundll32.exe	85

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6cd5134758561cccc5c313f8bf90c09bbeafdcd4a67ba0c8bb36d82b588f863e.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:724
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\6cd5134758561cccc5c313f8bf90c09bbeafdcd4a67ba0c8bb36d82b588f863e.dll,#1
  2⤵
  - System Location Discovery: System Language Discovery
  PID:464

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads