946bd06d8b3722a791fea4d84f496139eef6faef61640924cb72f5f1998a68e1

Analysis

max time kernel
149s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/07/2026, 15:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
DLL/Innoextract.exe
Size 1.2MB
Sample260707-sqlblagx7p
SHA256 946bd06d8b3722a791fea4d84f496139eef6faef61640924cb72f5f1998a68e1
MD5 e34db860c5dfb3ce705c0695e6dc74a4
SHA1 b2b560c725b1a810770f64d46d7d2ab42f7885f4
SHA512 4fac72f8c38664a5b2e20d5604963bc7e0a388f62532f3e15b4a5a215a34ad0f16a798093d8a2e610b39c3ce3094a8b6344b35c04bfff453919909b5897c8b87
SSDEEP 24576:LqoDZze8wrXcidU5hK2b2Z8fSuaNZ0+i1PnvIOhOc29KqhwREbVNVAVTo3jVa:a8wrxr2b2ZePnvIrKqhLVAVTo3jV
TLSH
T133453A65D653C1F5E89350F0140BE7FBA930AE3980309C97F788EE64BAB2ED25659703
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Innoextract.exe

C:\Users\Admin\AppData\Local\Temp\DLL\Innoextract.exe
"C:\Users\Admin\AppData\Local\Temp\DLL\Innoextract.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3052

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3052-0-0x0000000000400000-0x000000000052F000-memory.dmp

Download