Analysis

  • max time kernel
    148s
  • max time network
    151s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    19/07/2026, 23:18

General

  • Target
    0f045ca76c170d7d1cc5af4a4e8348e992ddf0dcb166f72228b056942b10a3fb.exe
  • Size 321KB
  • Sample260719-3ada6afv2m
  • SHA256 0f045ca76c170d7d1cc5af4a4e8348e992ddf0dcb166f72228b056942b10a3fb
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\0f045ca76c170d7d1cc5af4a4e8348e992ddf0dcb166f72228b056942b10a3fb.exe
    "C:\Users\Admin\AppData\Local\Temp\0f045ca76c170d7d1cc5af4a4e8348e992ddf0dcb166f72228b056942b10a3fb.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:5368

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Tmp794D.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\Tmp794D.tmp
        • Size 2KB
        • SHA256 0626659f2080cc8109d5c8b5c6618e9b08e1f0992ae22214f96af6898f804224
        • MD5 SHA1 SHA512 TLSH

        memory/5368-0-0x0000000074242000-0x0000000074243000-memory.dmp

        memory/5368-1-0x0000000000050000-0x00000000000A4000-memory.dmp

        memory/5368-2-0x0000000002760000-0x0000000002778000-memory.dmp

        memory/5368-3-0x0000000004B40000-0x0000000004B8C000-memory.dmp

        memory/5368-4-0x0000000074230000-0x00000000749EC000-memory.dmp

        memory/5368-15-0x00000000052D0000-0x0000000005336000-memory.dmp

        memory/5368-16-0x0000000074242000-0x0000000074243000-memory.dmp

        memory/5368-17-0x0000000074230000-0x00000000749EC000-memory.dmp