28bf45c6afc2f10d24a783b86c9509c168cb236643a4089f8d124243dce52fd6

Analysis

max time kernel
150s
max time network
147s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/07/2026, 20:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
TeamViewer v15.5.3 Portable AlterID by IamFool.exe
Size 19.7MB
Sample260722-zmkdfscc42
SHA256 28bf45c6afc2f10d24a783b86c9509c168cb236643a4089f8d124243dce52fd6
MD5 ccc69319ed2756ea7c274103b3380668
SHA1 cf84e856356ca184bb18a0dc2a3713b7e715b332
SHA512 ed80cefa045ff2f873330d6929d9dd2a34aea98915cc3c1dc50976bc4cf4346138ae6cb43ee53ac64cfb754f4723e242c04c709bc52f6dce025d57575f530115
SSDEEP 393216:Rd/m9FXu4yQPePPyOnO2kYQszDrsp/ZE7gtvUGYa787HU7s3tf1svtpXT:Rde9Fe4yQPe3Tnhk2zEp/4gttL87HU7h
TLSH
T1342733513BD182F2C5C340B46DDD17B164AAA72CCF524B022BC4EB1D4F36AE5EA2993D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	TeamViewer v15.5.3 Portable AlterID by IamFool.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5476	TeamViewer v15.5.3 Portable AlterID by IamFool.exe

C:\Users\Admin\AppData\Local\Temp\TeamViewer v15.5.3 Portable AlterID by IamFool.exe
"C:\Users\Admin\AppData\Local\Temp\TeamViewer v15.5.3 Portable AlterID by IamFool.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
PID:5476

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads