a3b454082dcbf17d64ec6539870404fb7dd99ba49a69f7f4d98b1b31c436c199

Analysis

max time kernel
150s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/07/2026, 18:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
file.exe
Size 18KB
Sample260727-xhs4payhmd
SHA256 a3b454082dcbf17d64ec6539870404fb7dd99ba49a69f7f4d98b1b31c436c199
MD5 4f7a468bdcf482f08bd014ae52db5299
SHA1 980f07f67302d588946e920dfdabdca3d3a8a05d
SHA512 9214f69b36a5de09073d83abc21278f3da7c4c03a9661735d0fea5cc63648a331f25e4549b654a48f8438f3ccab91aebf390be270ff8e6759431dc1f943965dc
SSDEEP 384:AgZbmcmhzwEUaUu94gXTP+av8U9c+H4P:c5UaF9Ka0U1C
TLSH
T1A3823B0FB8424316E1E110B4966696BBD9B9AC7633C414EBF7D44AEE0A686C1FC3610F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	file.exe

C:\Users\Admin\AppData\Local\Temp\file.exe
"C:\Users\Admin\AppData\Local\Temp\file.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1160

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads