40a7e5451878cc87fe2f8a86f21cb546ed3539b7d926127524289bc1ec3a7bda

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/07/2026, 15:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
40a7e5451878cc87fe2f8a86f21cb546ed3539b7d926127524289bc1ec3a7bda.exe
Size 260KB
Sample260722-sjmk3stwew
SHA256 40a7e5451878cc87fe2f8a86f21cb546ed3539b7d926127524289bc1ec3a7bda
MD5 56e057a2819e08877ba297426cfe418a
SHA1 b3f4d9aa2b33d4f1d7c31fe54b2afad5f1c5b10b
SHA512 5f74688beab30684ead0385c91f0314414a1dfff5ab0f86dfed75cbae092a1ca76b192f959f5ba8c4a9fc596a7d1eaf66f760bd57a91d23eff0ee43fb4b2c5a9
SSDEEP 6144:Iw12a8MjeVZPNF+wRyyM5xOXCtTB+rMEHIO:JsVLD3M5wXCtT4BHr
TLSH
T1384480F0A9D8CE96D25B25F138EE223E56217403EF1D8D763A54E96D8CE02C193B12DD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	40a7e5451878cc87fe2f8a86f21cb546ed3539b7d926127524289bc1ec3a7bda.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3800	40a7e5451878cc87fe2f8a86f21cb546ed3539b7d926127524289bc1ec3a7bda.exe
3800	40a7e5451878cc87fe2f8a86f21cb546ed3539b7d926127524289bc1ec3a7bda.exe

C:\Users\Admin\AppData\Local\Temp\40a7e5451878cc87fe2f8a86f21cb546ed3539b7d926127524289bc1ec3a7bda.exe
"C:\Users\Admin\AppData\Local\Temp\40a7e5451878cc87fe2f8a86f21cb546ed3539b7d926127524289bc1ec3a7bda.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3800

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3800-0-0x0000000000400000-0x000000000046B000-memory.dmp

Download

memory/3800-1-0x0000000000400000-0x000000000046B000-memory.dmp