ca946a210f37c4a37db7fc5a8d0769ee1386a4652caf00e7ecb5019c24c33119

Analysis

max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/07/2026, 15:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ca946a210f37c4a37db7fc5a8d0769ee1386a4652caf00e7ecb5019c24c33119.exe
Size 1.4MB
Sample260727-srcqvawthw
SHA256 ca946a210f37c4a37db7fc5a8d0769ee1386a4652caf00e7ecb5019c24c33119
MD5 6ecc7736e22b4d91dd45926e9399ffc9
SHA1 418a4f0aeac8f648a21b32fab7d527d8a3e73aea
SHA512 70f6103072d96f628bfc60c447385b5b9f1513bd8e1e06d473f3b85f9cd751701cb8d45d378807db667f93d333486c2d9c64dcbbc78b1d95352d233c82dc68c0
SSDEEP 24576:zR2r5hlkpvPk5wT7gR0JQCP/vl+8KX2HPK3cfwDQqDU9t:F2rTl+vMwTg+QyXl+8KX2vMrW
TLSH
T1E765E05077A1D073D3A220348DA6C3B58AB9BC317B72068376D47F2D7E746926A3A34D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ca946a210f37c4a37db7fc5a8d0769ee1386a4652caf00e7ecb5019c24c33119.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1136	ca946a210f37c4a37db7fc5a8d0769ee1386a4652caf00e7ecb5019c24c33119.exe
1136	ca946a210f37c4a37db7fc5a8d0769ee1386a4652caf00e7ecb5019c24c33119.exe

C:\Users\Admin\AppData\Local\Temp\ca946a210f37c4a37db7fc5a8d0769ee1386a4652caf00e7ecb5019c24c33119.exe
"C:\Users\Admin\AppData\Local\Temp\ca946a210f37c4a37db7fc5a8d0769ee1386a4652caf00e7ecb5019c24c33119.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:1136

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads