94052f98fa368cf4d36f799fcd0311e0e765de4c57c51b334ad7056d95a86717

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/07/2026, 15:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
94052f98fa368cf4d36f799fcd0311e0e765de4c57c51b334ad7056d95a86717.exe
Size 5.2MB
Sample260707-s2y2tsht3m
SHA256 94052f98fa368cf4d36f799fcd0311e0e765de4c57c51b334ad7056d95a86717
MD5 c3cabac0276f170759c56af6320e26e4
SHA1 2be492ffd498235d134e5ed07edb79eb4956c75c
SHA512 07eb4f141a75d8f614e1155f4ca36398a19aa6a56d8d5a908939c5b45bd4ea83025be067549ac919aac84ef30d28d47a12389d4fb5d73e3b9084862f73f5d2aa
SSDEEP 98304:C6GP+oVfdWLhcPrA9r81N+M5ZPW/wgQ6jEoSKvQnUI:CFWokKk9r8X+M5ZP8vZuUI
TLSH
T1E3467D21A3D18437E1735E3A9C3AD6D668397E302E64985A3EF89F0C5F39B817835253
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	94052f98fa368cf4d36f799fcd0311e0e765de4c57c51b334ad7056d95a86717.exe

C:\Users\Admin\AppData\Local\Temp\94052f98fa368cf4d36f799fcd0311e0e765de4c57c51b334ad7056d95a86717.exe
"C:\Users\Admin\AppData\Local\Temp\94052f98fa368cf4d36f799fcd0311e0e765de4c57c51b334ad7056d95a86717.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4712

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4712-0-0x0000000000400000-0x0000000000981000-memory.dmp

Download