930e18f43d1e374d2e9206b5b076dc7b41c10aa773f20dd14f385bd37deb4506

Analysis

max time kernel
148s
max time network
97s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/07/2026, 04:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
930e18f43d1e374d2e9206b5b076dc7b41c10aa773f20dd14f385bd37deb4506.exe
Size 374KB
Sample260706-e4v63ahx9y
SHA256 930e18f43d1e374d2e9206b5b076dc7b41c10aa773f20dd14f385bd37deb4506
MD5 0b23657591520f1af14e2c72e2ca82ea
SHA1 3c1ed541a0e2556bf33e5a33d28e9979031e1705
SHA512 a40fc81cbb30fd78931d51bdc4887541277a37f352b4aeec96da8c9239732036797a7e362c65a68464707b929522af886ea95e8134d72d1152f638a6e66695cc
SSDEEP 6144:EAll8dInrxOwZt/+QnsVRk4mpBKZ4usIet1J3qW0EfOUkol5uE8dWAIg:Bl8dQlOwZt/DIRk4mpBKZ4uFdvWA
TLSH
T151842A6DFB0710F1E6239676495EE77B8614B41A8036EF77EF0FCA46B4336222C1524A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	930e18f43d1e374d2e9206b5b076dc7b41c10aa773f20dd14f385bd37deb4506.exe

C:\Users\Admin\AppData\Local\Temp\930e18f43d1e374d2e9206b5b076dc7b41c10aa773f20dd14f385bd37deb4506.exe
"C:\Users\Admin\AppData\Local\Temp\930e18f43d1e374d2e9206b5b076dc7b41c10aa773f20dd14f385bd37deb4506.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1340

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1340-0-0x00000000001D6000-0x00000000001D7000-memory.dmp

Download

memory/1340-1-0x0000000000180000-0x00000000001E3000-memory.dmp