7a1dcf22a67c194367d4ef65304cf69c11df0b14c3d08215b7ee81373a3cefba

Analysis

max time kernel
150s
max time network
130s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/07/2026, 18:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
RemCom.exe
Size 3.1MB
Sample260723-w22phahn4x
SHA256 7a1dcf22a67c194367d4ef65304cf69c11df0b14c3d08215b7ee81373a3cefba
MD5 3e298792e73b58dd0b0d81f91683d9e0
SHA1 ed5066d483b7249dc75fa4b0578108f96b8c91fb
SHA512 aa3ce01fe0f5602cc79fe8879cfd773e0bbde8a820f81baa95698a5346b4cc1c6bb36cd39839995cb308cf9248e566500fdf8c040e022130693f01e9a04c6f66
SSDEEP 98304:qI4kvKvHx15RFAN4z4yGTpOnHNQc9xQrpf:qI4kU5RFRzw9OnHt92rl
TLSH
T108E59D13FE418471FAC2013B82FD5FBA8D7E9610136DA9E3669539B44F702D26A3934B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	RemCom.exe

C:\Users\Admin\AppData\Local\Temp\RemCom.exe
"C:\Users\Admin\AppData\Local\Temp\RemCom.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4988

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

remcom.log

Path C:\Users\Admin\AppData\Local\Temp\remcom.log
Size 352B
SHA256 5a857e5b1e61ef3ecc0d75f68b0236c0d9e5c02d729a45c1b57ec6bcb9e2aec9
MD5 f4f12933e8c641745b6ffe11c050fe53
SHA1 13a3a68abb11d23b5dea1c012b8fdfcd2b5c064a
SHA512 aee3fb7d5656e2b03c09e3e2a2490038fd164072996ed93469a20d36f9253b045ff976245a6420dbdcbfa08a5c9dc8fc705284f8c90591e2e0458263472bb3f2
TLSH
T1D1E042A546F1AFC7096C550318789AEA926D3A41618F89EF22497481342FC9FF6E0360
MD5 SHA1 SHA512 TLSH

Submit Download