d55892c294ba0018d3201768b9def3af89b5e0de064d61630be8938db22b75ef

Analysis

max time kernel
148s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/07/2026, 15:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
d55892c294ba0018d3201768b9def3af89b5e0de064d61630be8938db22b75ef.exe
Size 1019KB
Sample260722-sdj8rsgb33
SHA256 d55892c294ba0018d3201768b9def3af89b5e0de064d61630be8938db22b75ef
MD5 c53da92d9fc7fb0038b6873eaedfd435
SHA1 002229c5cb51dae09c4593138de8888cef69b052
SHA512 72a6d5411b4c5c18c5588ed5dcfe2834b199cfaaba8ac5780ddecb0331ef2e3d47ea501005953b3bb1b8f0569a2e79b75f1d8932102610bc282cba860014b4a6
SSDEEP 24576:f9pGj07S3w1Fe8kN6AMWFfA0Enjt4+MmrDCV/Ly9DH:207S34B8iaA0C4ZQOy
TLSH
T17F2533A3BAD144B9EC64C5B98EBE47FEDC9D484C685D458BA72073D268D19F12DE3003
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	d55892c294ba0018d3201768b9def3af89b5e0de064d61630be8938db22b75ef.exe

C:\Users\Admin\AppData\Local\Temp\d55892c294ba0018d3201768b9def3af89b5e0de064d61630be8938db22b75ef.exe
"C:\Users\Admin\AppData\Local\Temp\d55892c294ba0018d3201768b9def3af89b5e0de064d61630be8938db22b75ef.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:5660

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5660-0-0x0000000000400000-0x0000000000514000-memory.dmp

Download

memory/5660-1-0x0000000000408000-0x0000000000409000-memory.dmp

Download

memory/5660-2-0x0000000000400000-0x0000000000514000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads