878d9b8ff869a06fce1ab82f45541272e906c8406cc32efc69d1494cd041f182

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/07/2026, 14:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
878d9b8ff869a06fce1ab82f45541272e906c8406cc32efc69d1494cd041f182.exe
Size 452KB
Sample260722-san3jstvbw
SHA256 878d9b8ff869a06fce1ab82f45541272e906c8406cc32efc69d1494cd041f182
MD5 b3d2092321803ed797cd35578040c8fc
SHA1 8a7dccdfda283f6fe474300e7a824c2512384823
SHA512 7aae701c08887656a3a6053351b17e7a2130ffe281538a9ed59c15756d1e20e4015a73333947a2be1d24691557fbd6257b8a803e3de74b560804e7543a6c5e33
SSDEEP 6144:DWdC+v3cpQvYJvKPSwv2nPEuJ1fHbIop44Sm5FpxyN90vEbsN7:SEpQQJvKPSwvY1fHTHy90w67
TLSH
T1DFA48C16B7D4C039D6A30630B8ADA76692FEFD706574420BB7D07B9A2C71982DB30B17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	878d9b8ff869a06fce1ab82f45541272e906c8406cc32efc69d1494cd041f182.exe

C:\Users\Admin\AppData\Local\Temp\878d9b8ff869a06fce1ab82f45541272e906c8406cc32efc69d1494cd041f182.exe
"C:\Users\Admin\AppData\Local\Temp\878d9b8ff869a06fce1ab82f45541272e906c8406cc32efc69d1494cd041f182.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4956

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4956-0-0x0000000030000000-0x0000000030082000-memory.dmp

Download

memory/4956-2-0x0000000030000000-0x0000000030082000-memory.dmp