7e9a04b8d89a9db10bb519a4c4af77cfb59b78a4cf40e34fdd312e0b65c5fb8b

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/07/2026, 07:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
7e9a04b8d89a9db10bb519a4c4af77cfb59b78a4cf40e34fdd312e0b65c5fb8b.exe
Size 3.7MB
Sample260702-jd5d9scs8n
SHA256 7e9a04b8d89a9db10bb519a4c4af77cfb59b78a4cf40e34fdd312e0b65c5fb8b
MD5 c731abe52cfb39adf73c8325cd4d354c
SHA1 24abbc76ace370460a8220461cda5241c1389502
SHA512 76d0b7bd545109726472fb02aaba7db0ae37c15215bb937a5dc5dfd6763d977f778f376ba701d41424d472ece7885800d2bf813e2f714ff71ec16982c9f6d847
SSDEEP 49152:dUTmTKdjwuBi8s3jviX/xc7+BszkKvIJWP5Tmmh8PCIYrivI:2JdjwQcyBlKvIJvVE
TLSH
T1F6067D03FF4A90E2E8960E3511FA473AAB34E9185B1687C356653A35ECE13D16E3F394
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/1436-0-0x0000000001800000-0x0000000001BBB000-memory.dmp	upx
behavioral2/memory/1436-1-0x0000000001800000-0x0000000001BBB000-memory.dmp	upx

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	7e9a04b8d89a9db10bb519a4c4af77cfb59b78a4cf40e34fdd312e0b65c5fb8b.exe

C:\Users\Admin\AppData\Local\Temp\7e9a04b8d89a9db10bb519a4c4af77cfb59b78a4cf40e34fdd312e0b65c5fb8b.exe
"C:\Users\Admin\AppData\Local\Temp\7e9a04b8d89a9db10bb519a4c4af77cfb59b78a4cf40e34fdd312e0b65c5fb8b.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1436

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1436-0-0x0000000001800000-0x0000000001BBB000-memory.dmp

Download

memory/1436-1-0x0000000001800000-0x0000000001BBB000-memory.dmp