f1b264e92c092fc81abca293d4af27bc6bda0a1e52f66e0e0d7ff6f947c6ef89

Analysis

max time kernel
148s
max time network
108s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/07/2026, 00:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
f1b264e92c092fc81abca293d4af27bc6bda0a1e52f66e0e0d7ff6f947c6ef89.dll
Size 2.1MB
Sample260715-allgpaf15p
SHA256 f1b264e92c092fc81abca293d4af27bc6bda0a1e52f66e0e0d7ff6f947c6ef89
MD5 af546268e6628869fea10e6dc643bc6d
SHA1 f175c89979826a2de8b0c45a6445c5f2a8f26985
SHA512 c7367c1618c95cb5472aa516c449705ca0a65bc14d33a55ef7856ba930f312ce0e1f8f7266b390d7048fcd04dd72a099fdd42803702451aa9b08849106cded82
SSDEEP 24576:gY68fIjvUv5WtFOuZMeNQJV6MnaX5uoLwKsXnA9b7bXYU4llET:P6LLQUiZi5/w12TJEE
TLSH
T18BA54A45F612E8A0D9339239489FD37E173CBE218462CF53EE95FF4ABD33A912945242
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 5028 wrote to memory of 4884	5028	rundll32.exe	87

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\f1b264e92c092fc81abca293d4af27bc6bda0a1e52f66e0e0d7ff6f947c6ef89.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:5028
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\f1b264e92c092fc81abca293d4af27bc6bda0a1e52f66e0e0d7ff6f947c6ef89.dll,#1
  2⤵
  - System Location Discovery: System Language Discovery
  PID:4884

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads