c2802a86bfbb37288f00d03425a60e0efd60db9ed113ff39c4e6df0efba66a5d

Analysis

max time kernel
148s
max time network
119s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/07/2026, 23:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Instalar.exe
Size 2.1MB
Sample260706-3fjp5aav4q
SHA256 c2802a86bfbb37288f00d03425a60e0efd60db9ed113ff39c4e6df0efba66a5d
MD5 ac99addb4f8dd81182c6aa5f3226ed54
SHA1 f56b81689412188beac84fe43043f2e506c58dfd
SHA512 61d9db7607513fa1c6f1b54eaf681da4f577fd86dc70eb1e8f9678911dace20aeabd2f52b1f21e18c314ba1d51aa5a91edaaa9d0bda9cb754b2150a386200a48
SSDEEP 49152:20GyGomcECfXEcJXgwRuFqWVmEPX9lcuqsI9Z7nhj5ofF2FF7:gyGgECfXEiRqqWVmEPX9lcf9xnhj5ofQ
TLSH
T1E9A59E31F6A0C076D1733630CA59A3B967AABA310F35528766A01E3D2E705D39D3877B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Instalar.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4688	Instalar.exe
4688	Instalar.exe

C:\Users\Admin\AppData\Local\Temp\Instalar.exe
"C:\Users\Admin\AppData\Local\Temp\Instalar.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4688

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads