9c3a77177b5d1b899c15499972bb415e5614d730584ba0c24e271abea3038180

Analysis

max time kernel
148s
max time network
114s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
17/07/2026, 04:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9c3a77177b5d1b899c15499972bb415e5614d730584ba0c24e271abea3038180.exe
Size 2.8MB
Sample260717-fk381aey21
SHA256 9c3a77177b5d1b899c15499972bb415e5614d730584ba0c24e271abea3038180
MD5 fdaa8e223573a995fab5c30d9284d263
SHA1 93de64cba67de17dc2533eff30e6c4b4590de422
SHA512 7da96ccbd79324938f09faf797134580e6c20b9e399db03bb4bd69294f68e759329808cb3be6b76a958863724053e4e051c4d68885eb3a37fcce549c827ce585
SSDEEP 49152:ZMxc9EYuffdhu5OviynjUzXPIGEvVcV0Sxx/O/ndIC4nv4ajQQVWmDfvKEs+Tph:igu9hviynj8Ip+nxVEenv4iQQVkEr
TLSH
T1BBD523B49ECB11EADEC10974A703DBE73AB5199248D68C347AC13805B173FB7216E52B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	9c3a77177b5d1b899c15499972bb415e5614d730584ba0c24e271abea3038180.exe

C:\Users\Admin\AppData\Local\Temp\9c3a77177b5d1b899c15499972bb415e5614d730584ba0c24e271abea3038180.exe
"C:\Users\Admin\AppData\Local\Temp\9c3a77177b5d1b899c15499972bb415e5614d730584ba0c24e271abea3038180.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:996

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/996-0-0x0000000000270000-0x0000000000731000-memory.dmp

Download