4554ac97423d110cc75227a93655e4b1658a3699662c32180795fbc009756ccc

Analysis

max time kernel
150s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/07/2026, 11:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
4554ac97423d110cc75227a93655e4b1658a3699662c32180795fbc009756ccc.exe
Size 3.0MB
Sample260727-nf32fadn7z
SHA256 4554ac97423d110cc75227a93655e4b1658a3699662c32180795fbc009756ccc
MD5 94ccda5dd0dacf82e6b5582dc7bbd58b
SHA1 8e8fd3274b649cf046c40a4a81cc72ec064df3ef
SHA512 1ad082b77e6f96eb35501e4786ab41edbd4f8d3b68ea2d9a68f959f558cfa7c145dcbf01282dbfe655ea8f86e6d3999cfc65837af30d2ab1661806efd7cd051f
SSDEEP 49152:mNdDGViZaH7/p+Slo8+56LaShsyIWxmSUPlo0DRZh/1TCq333Tqh:CBGViCwdux3UPlo0VZpj333TE
TLSH
T1DEE55B13F284753EC81A2A36863395D4993BB76179168C23E7FC394C8F355906A3E7CA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	4554ac97423d110cc75227a93655e4b1658a3699662c32180795fbc009756ccc.exe

C:\Users\Admin\AppData\Local\Temp\4554ac97423d110cc75227a93655e4b1658a3699662c32180795fbc009756ccc.exe
"C:\Users\Admin\AppData\Local\Temp\4554ac97423d110cc75227a93655e4b1658a3699662c32180795fbc009756ccc.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3384

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3384-0-0x0000000002620000-0x0000000002621000-memory.dmp

Download

memory/3384-1-0x0000000000400000-0x000000000070F000-memory.dmp