150647e477f53f123e5d7085048e0fc13dd44f211d8496682f81ec2ec9c136fa

Analysis

max time kernel
148s
max time network
119s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/08/2026, 13:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
DOC-7P3AWU.hta
Size 2KB
Sample260803-qa3jtshh89
SHA256 150647e477f53f123e5d7085048e0fc13dd44f211d8496682f81ec2ec9c136fa
MD5 6154ceb9967ce928af798dcaa217dd3c
SHA1 3e249cee52702d7c78fdf4f7dd8f4b13f801b589
SHA512 135a76cb7469e231ce939afaaa7ab2719d39cd335c2ed75d726a420d3162c740cd553fb5aef558cb9f326192cd1b941201ef8d30abf80c79a0ccd09677aeecd1
TLSH
T11B5166F7B94693D5BD3249DB2A2F108C54941B422366E4B8F793DC01EF8DE1984787E8
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mshta.exe

C:\Windows\SysWOW64\mshta.exe
C:\Windows\SysWOW64\mshta.exe "C:\Users\Admin\AppData\Local\Temp\DOC-7P3AWU.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}
1⤵
- System Location Discovery: System Language Discovery
PID:952

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads