Analysis
- max time kernel
150s - max time network
153s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
- submitted
06/07/2026, 08:09
General
- Target 569d663518b0ce51c7411589cdf5dadb21a9eb2883582c3664c3df0ca2d071ad.exe
- Size 9.7MB
- Sample260706-j2lbasfy6k
- SHA256 569d663518b0ce51c7411589cdf5dadb21a9eb2883582c3664c3df0ca2d071ad
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Adds Run key to start application 2 TTPs 1 IoCs
- System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\569d663518b0ce51c7411589cdf5dadb21a9eb2883582c3664c3df0ca2d071ad.exe"C:\Users\Admin\AppData\Local\Temp\569d663518b0ce51c7411589cdf5dadb21a9eb2883582c3664c3df0ca2d071ad.exe"1⤵
- Adds Run key to start application
- System Location Discovery: System Language Discovery
-
C:\Users\Admin\AppData\Local\Temp\mg1AdQ2z.exeC:\Users\Admin\AppData\Local\Temp\mg1AdQ2z.exe1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
mg1AdQ2z.exe
memory/556-45-0x00000000014F0000-0x000000000154F000-memory.dmp
memory/556-21-0x00000000014F0000-0x000000000154F000-memory.dmp
memory/556-41-0x00000000014F0000-0x000000000154F000-memory.dmp
memory/556-43-0x00000000014F0000-0x000000000154F000-memory.dmp
memory/556-37-0x00000000014F0000-0x000000000154F000-memory.dmp
memory/556-38-0x00000000014F0000-0x000000000154F000-memory.dmp
memory/556-24-0x00000000014F0000-0x000000000154F000-memory.dmp
memory/556-23-0x00000000014F0000-0x000000000154F000-memory.dmp
memory/556-39-0x00000000014F0000-0x000000000154F000-memory.dmp
memory/556-22-0x00000000014F0000-0x000000000154F000-memory.dmp
memory/556-14-0x00000000014F0000-0x000000000154F000-memory.dmp
memory/556-25-0x00000000000A0000-0x0000000000A4C000-memory.dmp
memory/556-40-0x00000000014F0000-0x000000000154F000-memory.dmp
memory/556-42-0x00000000014F0000-0x000000000154F000-memory.dmp
memory/556-44-0x00000000014F0000-0x000000000154F000-memory.dmp
memory/556-36-0x00000000014F0000-0x000000000154F000-memory.dmp
memory/5968-31-0x00000000014B0000-0x000000000150F000-memory.dmp
memory/5968-1-0x0000000000580000-0x0000000000581000-memory.dmp
memory/5968-29-0x00000000014B0000-0x000000000150F000-memory.dmp
memory/5968-28-0x00000000014B0000-0x000000000150F000-memory.dmp
memory/5968-32-0x00000000014B0000-0x000000000150F000-memory.dmp
memory/5968-27-0x00000000014B0000-0x000000000150F000-memory.dmp
memory/5968-30-0x00000000014B0000-0x000000000150F000-memory.dmp
memory/5968-33-0x00000000014B0000-0x000000000150F000-memory.dmp
memory/5968-12-0x00000000014B0000-0x000000000150F000-memory.dmp
memory/5968-35-0x00000000014B0000-0x000000000150F000-memory.dmp
memory/5968-26-0x00000000014B0000-0x000000000150F000-memory.dmp
memory/5968-34-0x00000000014B0000-0x000000000150F000-memory.dmp
memory/5968-2-0x00000000014B0000-0x000000000150F000-memory.dmp
memory/5968-9-0x00000000014B0000-0x000000000150F000-memory.dmp
memory/5968-10-0x00000000014B0000-0x000000000150F000-memory.dmp
memory/5968-11-0x00000000014B0000-0x000000000150F000-memory.dmp