539e1146afad374a8a302ab35f92c2fd2d2d40c896cda7424fc5372957ca70db

Analysis

max time kernel
148s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/07/2026, 14:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
539e1146afad374a8a302ab35f92c2fd2d2d40c896cda7424fc5372957ca70db.exe
Size 91KB
Sample260728-rgpf8aar31
SHA256 539e1146afad374a8a302ab35f92c2fd2d2d40c896cda7424fc5372957ca70db
MD5 ab7e5cc6ecd17ea8424e5cf1c36c9508
SHA1 eefc1bf1ccb6823e5ec615ff60aa613fc461d3d5
SHA512 98e76a8ef9216908e0c7b7ddd8b3235b31fd7a0860838d372180a2e2a8dcbffba62f79b881fc4320aa7dd2cffc43ed91c602e8e7c22ec5964bcf1c0f72ff450f
SSDEEP 1536:5B8NzlO+OAWgxc+gPgeJyg+gCYgMR2B5TEigJ2T4gsZ/c:FZAWgxc+gPgeJyg+gCYgMR2B5TEigJ2b
TLSH
T167930F52A7EB1100FAF36A3D59B74268A73FB9B28936C74F01D9155D0FB3D80AE90712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	539e1146afad374a8a302ab35f92c2fd2d2d40c896cda7424fc5372957ca70db.exe

C:\Users\Admin\AppData\Local\Temp\539e1146afad374a8a302ab35f92c2fd2d2d40c896cda7424fc5372957ca70db.exe
"C:\Users\Admin\AppData\Local\Temp\539e1146afad374a8a302ab35f92c2fd2d2d40c896cda7424fc5372957ca70db.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1004

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1004-0-0x0000000000400000-0x0000000000417000-memory.dmp

Download