6b1282ce3657782da331e56c669596a8f4dd780be3f3c314f1034ad48a2b2506

Analysis

max time kernel
148s
max time network
149s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/08/2026, 12:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
DOC-LYFG75.hta
Size 3KB
Sample260803-p4y8tsycmd
SHA256 6b1282ce3657782da331e56c669596a8f4dd780be3f3c314f1034ad48a2b2506
MD5 605de6fbdecde5bdb13abc32f29f4f08
SHA1 d63186ff130fbe3fea5710d29294c028300fe544
SHA512 70209203cd6aebb10e73a1a57041511752bd5bbd7a149fe1c6da4b7d28598604b96d5e05ff568d3d210c262cade743f23752db3aaacd2641c4d25716a71b1414
TLSH
T1E95143F7BA4643C5BC325A9F1A2F519D14981B431365E0B8F2E2DC00EF88E4944B97E8
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mshta.exe

C:\Windows\SysWOW64\mshta.exe
C:\Windows\SysWOW64\mshta.exe "C:\Users\Admin\AppData\Local\Temp\DOC-LYFG75.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}
1⤵
- System Location Discovery: System Language Discovery
PID:2880

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads