ae86e4628aed344a5e8922ddc4b3251238b148503d98b771d1845fdd83df6ed2

Analysis

max time kernel
148s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/08/2026, 15:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
backdoor.exe
Size 7KB
Sample260801-sd31wacc69
SHA256 ae86e4628aed344a5e8922ddc4b3251238b148503d98b771d1845fdd83df6ed2
MD5 73ef4aab87ee8625578a0b6776f109b5
SHA1 868c3daafec41a91883fa2bd556bf6b1ef94679e
SHA512 b992091b0f2c18ad257be9a5eed5cb1b8cb021b4e66ea9b6c1ec313c52f98679eb32176f6e56c5ee271b3efe988de0e98756ca24dcf44399ccac3825f7eab54a
SSDEEP 24:ev1GSkiiljEowScwUIVcMyt8XZh9h9ClfAbb2+2u8up+:qkfj2Sx3y6XZh9hMl+2G8b
TLSH
T11AE1D0B3B2365DB2F3382FBE8143969551FD763406E20B490E2814055591D1979B5FA3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	backdoor.exe

C:\Users\Admin\AppData\Local\Temp\backdoor.exe
"C:\Users\Admin\AppData\Local\Temp\backdoor.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4920

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4920-0-0x0000000000400000-0x00000000004051C8-memory.dmp

Download

memory/4920-1-0x0000000000400000-0x00000000004051C8-memory.dmp