92b10c18236bba221807b5305ad50191917cfa8fc77bf5a735d33e77e16bd098

Analysis

max time kernel
148s
max time network
116s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/08/2026, 12:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
WiinRar-O18VIT.hta
Size 2KB
Sample260803-pr5j3she37
SHA256 92b10c18236bba221807b5305ad50191917cfa8fc77bf5a735d33e77e16bd098
MD5 1c20d1093b5d8cdbd1d82622c1e5f92f
SHA1 c88caf08797428892746e9ba970d0d6aae483684
SHA512 57ce8e7775456067e8378d2174fa1ecbd41dbe8d319dc0c0f85cbf4b68108f4b6e0db689e97753187939a450b622f456254d2913b629b0476e3212a6df527be5
TLSH
T157518AFBBA5756D4BD324AAB1B2F508D54D426431325E0B8F68ADC01EF89E1D86343D8
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mshta.exe

C:\Windows\SysWOW64\mshta.exe
C:\Windows\SysWOW64\mshta.exe "C:\Users\Admin\AppData\Local\Temp\WiinRar-O18VIT.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}
1⤵
- System Location Discovery: System Language Discovery
PID:3732

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads