75fbd41b010b61517227cae1d5b8f6dcde0bebeca0062758fa2bb468e9828475

Analysis

max time kernel
148s
max time network
87s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/07/2026, 04:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
75fbd41b010b61517227cae1d5b8f6dcde0bebeca0062758fa2bb468e9828475.exe
Size 477KB
Sample260716-e6dd2agw3s
SHA256 75fbd41b010b61517227cae1d5b8f6dcde0bebeca0062758fa2bb468e9828475
MD5 91c354616b47cc780ee709780b2a48bd
SHA1 860052bab67f22b03271ad6aefa53605d61cd7f9
SHA512 2afac215545ffba40c5f15697f1c20c5e19a993415298de2149dcbf3d4b2521b1659c1ff5764d2287940ad5e9aa6f26b3bc267a3ac452a2e92c1fcc7618d5202
SSDEEP 3072:ROz1YhRggmGfQ5T/zNpyIVLijtAKxCn+twWU/GXq2uk/UwvcCG:RO5YhMTL+IVLijtAKw+tw7GvvzG
TLSH
T195A4E650B5E06CA7D647C33598E7E1213739A251335BDB17E6088E3C0A6B7D33ED6A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	75fbd41b010b61517227cae1d5b8f6dcde0bebeca0062758fa2bb468e9828475.exe

C:\Users\Admin\AppData\Local\Temp\75fbd41b010b61517227cae1d5b8f6dcde0bebeca0062758fa2bb468e9828475.exe
"C:\Users\Admin\AppData\Local\Temp\75fbd41b010b61517227cae1d5b8f6dcde0bebeca0062758fa2bb468e9828475.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1372

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1372-0-0x0000000000F40000-0x0000000000F50000-memory.dmp

Download