11d1487736aab346ad82fcc88568c06f01cf82b20e1831d18088fb89b469424b

Analysis

max time kernel
26s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
03/07/2026, 04:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Voicemeeter8Setup.exe
Size 71.0MB
Sample260703-ep46esbs91
SHA256 11d1487736aab346ad82fcc88568c06f01cf82b20e1831d18088fb89b469424b
MD5 10803e8a8ac3b803d9a269c7133187db
SHA1 31610b59ba26a2693e276b2a8ad45b9f9213b92e
SHA512 16b059e6f84c1b5aeb2c4c70525ba81c10dbb75deeaa77b6b27df6f5de335261fcf5b55438497075d375823137ebf5b0c624e405507564c87bab857e9873b770
SSDEEP 1572864:mcpJmGUuJksHqn+VPG2AOpg0ieP0P0zdpaDbybfrVW6waPgbhr:mVGUu6sKn+VaQKePkDHqfrVHP61
TLSH
T1A7F7226F4960C258D267423223FFD6111964FF2DB6C75C921860B8A6FA78F314DADBC2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Voicemeeter8Setup.exe

C:\Users\Admin\AppData\Local\Temp\Voicemeeter8Setup.exe
"C:\Users\Admin\AppData\Local\Temp\Voicemeeter8Setup.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:576

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads