501b32b11d264771763d300f98f315d76c3f5e8cbf96adaa35c830c160c90063

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/07/2026, 17:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
501b32b11d264771763d300f98f315d76c3f5e8cbf96adaa35c830c160c90063.exe
Size 4.2MB
Sample260718-wh5baacv7x
SHA256 501b32b11d264771763d300f98f315d76c3f5e8cbf96adaa35c830c160c90063
MD5 cc79e1d2dd32a449af21f4e645c72e16
SHA1 58cb1ae9c9cdc79a0f9cc469094ebfc2824c5330
SHA512 20ca185eecacaea9dbfd6f8c50be855c58477e3352d1d27826b7c6b629fa3b248c1558f18395deff259e57c0b5db6af1165c3c1dc6d73ba6aa50e8838f55c445
SSDEEP 98304:968Y7OydqjTTsBs7SBTSJM9Hcmq5qW6K27JcHhh:QnOydqjcxTr9H1qTh
TLSH
T1C416BF20BB91C136D9F202B15ABDAF6F502CBE241B2490CB72DC7E5D19712D32A76727
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
2868	501b32b11d264771763d300f98f315d76c3f5e8cbf96adaa35c830c160c90063.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	501b32b11d264771763d300f98f315d76c3f5e8cbf96adaa35c830c160c90063.exe

C:\Users\Admin\AppData\Local\Temp\501b32b11d264771763d300f98f315d76c3f5e8cbf96adaa35c830c160c90063.exe
"C:\Users\Admin\AppData\Local\Temp\501b32b11d264771763d300f98f315d76c3f5e8cbf96adaa35c830c160c90063.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:2868

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

83e9eeb58203.dll

Path C:\Users\Admin\AppData\Local\Temp\krkr_67275533fef5_240712500_2868\83e9eeb58203.dll
Size 50KB
SHA256 34fad2248b4fd951b3399734ea3e642bce3cb36855f13f28a7bf4de474821d08
MD5 3690a76d0392e13f7f29cbd0d0bc974d
SHA1 9cd5104ce60a9dec2a41c45f2c8b6cae00af6feb
SHA512 5473b72bde0c86d794427268851c0448a0abec03e139ca746b8aeebb9c8a1035fcaea9f632518f89cf528baaa78f85a69276bfc9d648fa1c471e72cab1f33371
SSDEEP 768:jYoq+tNMO4/ZihG3Qd/vViBnPxAMiwUFBCo4R/Y3:AWNMRAd/ve5AB4Rg3
TLSH
T138336B21B590C0F3C41A55784462C7A19E6F79111BF8A4873FAE1BBA6F722C0E73935B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download