4c96d7e241b92fe31eb2075416c57b76fe3c9205d464f9a3f1daafb830d7fe4a

Analysis

max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 10:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
4c96d7e241b92fe31eb2075416c57b76fe3c9205d464f9a3f1daafb830d7fe4a.exe
Size 2.8MB
Sample260730-mpff3aga45
SHA256 4c96d7e241b92fe31eb2075416c57b76fe3c9205d464f9a3f1daafb830d7fe4a
MD5 bb5f3b871d0b88f2aeebaa0e06aff932
SHA1 fe0814ad2d17849d5ae4ba396ef44c8edb97f5b9
SHA512 87eae687e4a52a84c6cd118dc7eb0e40d6451fc75ecd43fdc2c7fe98921e1770f168e353235c9f96b3652c3f5939ca243ef586db3d75ea18c21c831167c02172
SSDEEP 49152:ml8g0u7djACBAnkhb5FwSQXACBOkzxAb9k+CIj:K89KLkkQOms9Tz
TLSH
T1CCD56CA2B284753EC46F063A5D3BA3B4993B7751691A9C3B47F0088CCF356413A3E667
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	4c96d7e241b92fe31eb2075416c57b76fe3c9205d464f9a3f1daafb830d7fe4a.exe

C:\Users\Admin\AppData\Local\Temp\4c96d7e241b92fe31eb2075416c57b76fe3c9205d464f9a3f1daafb830d7fe4a.exe
"C:\Users\Admin\AppData\Local\Temp\4c96d7e241b92fe31eb2075416c57b76fe3c9205d464f9a3f1daafb830d7fe4a.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4360

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4360-0-0x0000000000E50000-0x0000000000E51000-memory.dmp

Download

memory/4360-1-0x0000000000400000-0x00000000006DF000-memory.dmp