b8f77ade66a7d588d4dd6165231b9063f2572381a0dbd9becaf0210ac1dccd29

Analysis

max time kernel
148s
max time network
139s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/07/2026, 07:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-07-27_d0cf3bb9b3a7125a2634d7d391df1045_elex_glasses_newsreels_quickbrownfox_wannacry.exe
Size 25KB
Sample260727-jrljbabl6t
SHA256 b8f77ade66a7d588d4dd6165231b9063f2572381a0dbd9becaf0210ac1dccd29
MD5 d0cf3bb9b3a7125a2634d7d391df1045
SHA1 3f9d9749687925733be754aa195f5f2b874486ff
SHA512 69950fad7aa0d01a16f34adaf3f2b852fca8adbbb66da50d7cc6b64251286d06c7cfe4c077f933213519ade8e1b99207f21442b54c7efc594b270f3d4f6fe337
SSDEEP 768:Ipu62wYpLP1lVQwyLaUh3a7xOaW4c+mpei:yu6ypxByLaUh36wpei
TLSH
T112B2C603C9994B97D616027C78B742F147BE498C820ADE6F7348EC7E38D7205AF5A68D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-07-27_d0cf3bb9b3a7125a2634d7d391df1045_elex_glasses_newsreels_quickbrownfox_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-27_d0cf3bb9b3a7125a2634d7d391df1045_elex_glasses_newsreels_quickbrownfox_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-27_d0cf3bb9b3a7125a2634d7d391df1045_elex_glasses_newsreels_quickbrownfox_wannacry.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:5032

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5032-0-0x0000000000400000-0x0000000000409000-memory.dmp

Download

memory/5032-1-0x0000000000400000-0x0000000000409000-memory.dmp