9bdbe9132c1bbf74f98bf5cb180933e423986a0830b4fb503340149c96158cd4

Analysis

max time kernel
298s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/07/2026, 06:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
GTAIV.exe
Size 16.6MB
Sample260722-g4aapsej71
SHA256 9bdbe9132c1bbf74f98bf5cb180933e423986a0830b4fb503340149c96158cd4
MD5 193aea5d3726529c3197a289b9786fbf
SHA1 32a3f889f9fcc572ea798213f2e9eb429eb0c9a3
SHA512 b1d6d94933718158169b13670a0d4e6ea640fbe5f7e73024b9cb8ed69557adbb8a23a86d5773ce9f777091fa282351e57552780aaefcf1982a08a6cf402f3ec7
SSDEEP 196608:khYqMbElAtUDvq/NoJ+0l0EDFbs8XyAil:kWfRGiW+0iEDx/C/
TLSH
T1EC078C40F2A382B1D41934B4759ABAAFE57972440F3C4AD3A7E42E1DDDE02D02AFB5D1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	GTAIV.exe

C:\Users\Admin\AppData\Local\Temp\GTAIV.exe
"C:\Users\Admin\AppData\Local\Temp\GTAIV.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3348

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3348-0-0x0000000000480000-0x0000000002066400-memory.dmp

Download

memory/3348-1-0x0000000000480000-0x0000000002066400-memory.dmp