14583fe60f3e675237beb2d40f2c3db6bbe64e6c7a6d04b2467d26424aa40ff3

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/07/2026, 07:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
14583fe60f3e675237beb2d40f2c3db6bbe64e6c7a6d04b2467d26424aa40ff3.exe
Size 1.6MB
Sample260724-h1bj2ahq21
SHA256 14583fe60f3e675237beb2d40f2c3db6bbe64e6c7a6d04b2467d26424aa40ff3
MD5 b788e3b22f17968a88416dc2cd74fa74
SHA1 9e3c5a30a20cd04e1cd240299692dbe16c3b8140
SHA512 5f2e50f0980b19cdd8a0b5472139e40445279a4a878a3e5f3b793b7f3482af3f390da8479648de1dfc55bf583068030c391b045fe142434412e77d0fe0d0b5c3
SSDEEP 12288:NfHHAN7dNkcKxvAOwLU4LDAptNyvUgXZ32dT4ePc7N29Cxs5+j2QNbxf53nHVoTQ:NgVmNyBo4kx929bL3Hnx
TLSH
T17085F38D2121C433C9A31FF690A49F579904FCAA3723A0AEE1817EA57575E801BF35B7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	14583fe60f3e675237beb2d40f2c3db6bbe64e6c7a6d04b2467d26424aa40ff3.exe

C:\Users\Admin\AppData\Local\Temp\14583fe60f3e675237beb2d40f2c3db6bbe64e6c7a6d04b2467d26424aa40ff3.exe
"C:\Users\Admin\AppData\Local\Temp\14583fe60f3e675237beb2d40f2c3db6bbe64e6c7a6d04b2467d26424aa40ff3.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:908

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/908-0-0x0000000000400000-0x00000000005A9000-memory.dmp

Download

memory/908-1-0x0000000000400000-0x00000000005A9000-memory.dmp