677549ca71b5b854bcec07743bae3d8716b429a2513133aec05a14a2e5f48021

Analysis

max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 23:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
677549ca71b5b854bcec07743bae3d8716b429a2513133aec05a14a2e5f48021.dll
Size 1.7MB
Sample260804-2y4mkssekh
SHA256 677549ca71b5b854bcec07743bae3d8716b429a2513133aec05a14a2e5f48021
MD5 80c0dbfa69005e0f0dbd07f760630f88
SHA1 9b1cfd73a31451e65e614701fe1a583c8fb6c794
SHA512 535eee94a14cc19523a9294a44ac0d6916a64df0c2e3900648570efe8b3411539c973e385384c584b109b57005616380fc004f9deb4e6979d534b0ca11afe80d
SSDEEP 24576:wS14xw4DUwnOdV2SAjPBW+GCDQVcuoIKSQhDVxDU67f+FORmWjAUSzdS6NFh2SXc:v4D6V61HSS4xBa
TLSH
T1C085E428A3E5C451E4A247381A7AD3253B367D1287B9C9CFE7587B8C1F72AC0E634716
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 1812 wrote to memory of 1488	1812	regsvr32.exe	89

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\677549ca71b5b854bcec07743bae3d8716b429a2513133aec05a14a2e5f48021.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:1812
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\677549ca71b5b854bcec07743bae3d8716b429a2513133aec05a14a2e5f48021.dll
  2⤵
  - System Location Discovery: System Language Discovery
  PID:1488

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads