f2c14e96f757ff5b429f790ed905393243d62e0a38c11830d2faccfcda71efb7

Analysis

max time kernel
148s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/07/2026, 00:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
$PLUGINSDIR/nsis_tauri_utils.dll
Size 41KB
Sample260729-apbrna11cs
SHA256 f2c14e96f757ff5b429f790ed905393243d62e0a38c11830d2faccfcda71efb7
MD5 32fc122e33b46806492a3f8697a173f8
SHA1 bfa57ebd5a79fc1401028aec49c4992e5fccfbc5
SHA512 d7316c8983a82ba169108ceb4b35d4dc7a4d6a4b003956c73609db32768961679ef5811dc2d5d54d3c0373146f113e63c22580588f395dd2433ab5d46833f67c
SSDEEP 768:E/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVG8I5ALZ:ewODZzTrAV5Oevq4DtXHVG8V
TLSH
T10E137D49FDC57E76E6CF18311848463E4A7FC9081A00C997E3615EA3CAD2732AED925F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 5012 wrote to memory of 1256	5012	rundll32.exe	89

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\nsis_tauri_utils.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:5012
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\nsis_tauri_utils.dll,#1
  2⤵
  - System Location Discovery: System Language Discovery
  PID:1256

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads