350ad2f920e96f7d55546015e7f72494a5f62e356213deeb45beae5be0e50cdf

Analysis

max time kernel
148s
max time network
132s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 20:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
350ad2f920e96f7d55546015e7f72494a5f62e356213deeb45beae5be0e50cdf.exe
Size 1.0MB
Sample260730-zespvsxane
SHA256 350ad2f920e96f7d55546015e7f72494a5f62e356213deeb45beae5be0e50cdf
MD5 9a841d8538f83b670ba78bc493030b20
SHA1 4bade225cf77296cf72b7d9ec941745eb775aa92
SHA512 7d504b6ac2974b11697c3f4b181d81b8deea8633e71a76c278ef3301440f100efa2c319413e1299d29d60d5ebc4246992fb989a70a0b96fd43c0e11c54ef6289
SSDEEP 24576:Z9R5kZ6HJ+uWRcZwJmSU/2ajjXhrp4w5a01Mnx:7kZl8SUdXpp4w5a08
TLSH
T1BC35491273F58139F2B31B706D79A2645A7ABCB15831C61F33DC690D1B70A81EA26B37
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	350ad2f920e96f7d55546015e7f72494a5f62e356213deeb45beae5be0e50cdf.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	350ad2f920e96f7d55546015e7f72494a5f62e356213deeb45beae5be0e50cdf.exe

C:\Users\Admin\AppData\Local\Temp\350ad2f920e96f7d55546015e7f72494a5f62e356213deeb45beae5be0e50cdf.exe
"C:\Users\Admin\AppData\Local\Temp\350ad2f920e96f7d55546015e7f72494a5f62e356213deeb45beae5be0e50cdf.exe"
1⤵
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:2552

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2552-0-0x00000000000B0000-0x00000000001C1000-memory.dmp

Download