2e1d61a230245186cce9d7ed0882656671dc2c3e77ac62dc59ef2dbe75c4b96b

Analysis

max time kernel
148s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/07/2026, 15:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2e1d61a230245186cce9d7ed0882656671dc2c3e77ac62dc59ef2dbe75c4b96b.exe
Size 424KB
Sample260722-srbtjsbr5t
SHA256 2e1d61a230245186cce9d7ed0882656671dc2c3e77ac62dc59ef2dbe75c4b96b
MD5 80f7682e6c20044d8f5bae6cea762b3f
SHA1 8f1377bcdf316ddc19ceb54bfa9adabe8f20a48a
SHA512 2704884b30cc0982329547abbca3d0e655b3829cebdb43f1e81621294d3809642fd30f3f82ac1721bf2130779615d5b65d38b26746e6373156a6b16c95a802c3
SSDEEP 6144:zUTxxIXB0iS0GaYApLhTrKUfdOtvHtKrr4Kdyj7XKUTa8m23d7KJqKWMJcjo+eCO:zUtNL8YcL5YHaI7XHgZQKhJgeCmdN
TLSH
T10994D023F6E1AF33E522C33444B57131E7BEA1359A2383275F642F95B89A2F04E55782
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2e1d61a230245186cce9d7ed0882656671dc2c3e77ac62dc59ef2dbe75c4b96b.exe

C:\Users\Admin\AppData\Local\Temp\2e1d61a230245186cce9d7ed0882656671dc2c3e77ac62dc59ef2dbe75c4b96b.exe
"C:\Users\Admin\AppData\Local\Temp\2e1d61a230245186cce9d7ed0882656671dc2c3e77ac62dc59ef2dbe75c4b96b.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4416

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4416-0-0x0000000030000000-0x0000000030081000-memory.dmp

Download

memory/4416-1-0x0000000030000000-0x0000000030081000-memory.dmp