2d741b1c615af8d95bb62d064e2243520f14031d8af687ac3bd8e46dca343a00

Analysis

max time kernel
148s
max time network
130s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/08/2026, 12:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
WiinRar-Y2VNKY.hta
Size 3KB
Sample260803-pr4msahe35
SHA256 2d741b1c615af8d95bb62d064e2243520f14031d8af687ac3bd8e46dca343a00
MD5 533780e0085b23179c3e2d427ff79482
SHA1 23f9bfb5e2a0e306b50385d882bf89e15402a99b
SHA512 6804f3dcc7eb878e55e0f703b1bbc9e41820a1d478280d98dea64719b11530687bb01bb7d0e8d4d6bc11fcd72e0bb07b076d32dc9b83a4cd1a734b43ca901a6f
TLSH
T1356157F7BA4693C5BC31899B6A2F508D14841A422766D5FCF297DC01EF8CE4E84743E8
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mshta.exe

C:\Windows\SysWOW64\mshta.exe
C:\Windows\SysWOW64\mshta.exe "C:\Users\Admin\AppData\Local\Temp\WiinRar-Y2VNKY.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}
1⤵
- System Location Discovery: System Language Discovery
PID:2960

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads