034af69cd53250958c5e8f4f83580012a9019d7bfd6271f04b696f80a12c3044

Analysis

max time kernel
148s
max time network
115s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/07/2026, 20:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
034af69cd53250958c5e8f4f83580012a9019d7bfd6271f04b696f80a12c3044.exe
Size 276KB
Sample260728-y87kfahj21
SHA256 034af69cd53250958c5e8f4f83580012a9019d7bfd6271f04b696f80a12c3044
MD5 13641a3d39a92ab2d33746c2e5e49e6b
SHA1 cf87af9b11b836de6e154cdabae9ae2868fd73c1
SHA512 e9d4e079424637485a88b6f2d7023dd8e540e0cf4c61d11edc46ced30f90f401cf193c04bf33664a4495cbae288a54b17cc7b1425b42bd55af50f822c2706432
SSDEEP 6144:apMURP24EPlxwH/MHcBx3rAOugoL5cYbu:EMURPalxwHKY3rY9cYbu
TLSH
T12F548C2175E1C476D5730A3608F9A7B5567DBC304E3A9A3F63D41B2E9E30493AA30B63
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	034af69cd53250958c5e8f4f83580012a9019d7bfd6271f04b696f80a12c3044.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3552	034af69cd53250958c5e8f4f83580012a9019d7bfd6271f04b696f80a12c3044.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
3552	034af69cd53250958c5e8f4f83580012a9019d7bfd6271f04b696f80a12c3044.exe

C:\Users\Admin\AppData\Local\Temp\034af69cd53250958c5e8f4f83580012a9019d7bfd6271f04b696f80a12c3044.exe
"C:\Users\Admin\AppData\Local\Temp\034af69cd53250958c5e8f4f83580012a9019d7bfd6271f04b696f80a12c3044.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:3552

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

launcher_config.ini

Path C:\Users\Admin\AppData\Local\Temp\launcher_config.ini
Size 351B
SHA256 4cbb9fc0dce3942784509b73c98277abdd58d794dcaa468184498041500b4b05
MD5 86de42302aa30c40d26b038c0d24c236
SHA1 548e3fbfdc94d92a5d114480f327ee43935f0633
SHA512 c42283742e88f6a93512aeecb5b1958b46123276f98630ebfc95607407c15a5442d04932293644f90b4ff5730f41bc0fe275bb27dbb4e3d0c3426e2c4d168315
TLSH
T150E0288059002462D061D864FCA50FC1C0FEB05D44C090B9FF0406CE05BC01C12D4517
MD5 SHA1 SHA512 TLSH

Submit Download