c7e024d6f64531d7285f2795f053ea282842e8624b2a67c9d6dda753b180dbbc

Analysis

max time kernel
150s
max time network
116s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
31/07/2026, 00:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Etiqueta.exe
Size 15.2MB
Sample260731-akeyhszdpg
SHA256 c7e024d6f64531d7285f2795f053ea282842e8624b2a67c9d6dda753b180dbbc
MD5 679913a791070e804366d868c248bbd4
SHA1 180f1a866dda141d3ab043b013cecf67655ef524
SHA512 87f5cee46bb145da91d0f7eb830cfb75cdcd0f421c34ffa8ef86b01cf47e19c883ae376fb27a35edf7d306c286291df007f6c836b242bf394b0c588779680f86
SSDEEP 196608:drJLdmvDF2xw7YuNQnIXBwhboMHFrXGlIQvmvehhzSg78Qm2su:dr9dCDF2xHuBwhcQGlRmvzg78QmR
TLSH
T14DF69D13B288547BD0271A364D6BA694683BBE243D22CDB77FB06C4CDE31944682B777
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Etiqueta.exe

C:\Users\Admin\AppData\Local\Temp\Etiqueta.exe
"C:\Users\Admin\AppData\Local\Temp\Etiqueta.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2328

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Connect.ini

Path C:\Users\Admin\AppData\Local\Temp\Connect.ini
Size 122B
SHA256 8b4376139cf002e60fb6a41993ff6029c61ee71947067da087fefbb491111789
MD5 20c0553cc94ccdae10b70991380b9078
SHA1 6cfcef8db0d54b600b58cd85c281235b9bb5e27b
SHA512 745e7be341c05b72d4a2849f539dfd8083242a15b2cc2cfeaece36e563fe84eacff3baf0f1cb84aeba5ee3c4a61da382f7ba4ab80ed843cf0f0a01082ab3d25d
TLSH
T1DCB02B24424E41C5540B40330231110CF4A5E858178933008130C124457449D37831C5
MD5 SHA1 SHA512 TLSH

Submit Download

memory/2328-0-0x0000000003460000-0x0000000003461000-memory.dmp

Download

memory/2328-6-0x0000000000400000-0x00000000013D8000-memory.dmp