29151839ff1623c3f87f1a81735a28164ad00c157bfd9e07c604506188afd55f

Analysis

max time kernel
148s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 10:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
FileIOTest.exe
Size 527KB
Sample260804-mah9eaxeqa
SHA256 29151839ff1623c3f87f1a81735a28164ad00c157bfd9e07c604506188afd55f
MD5 c7290b3d2f9966cdefa9d20fda26ab79
SHA1 9b9e1ecf12b856b60f00b16b7014356a31c767b7
SHA512 1d489ef0093656e3ad29fb638a738bc9f00cf690aebcf30a3cacad82583991cafeb48b0495eb638e910d49e873be898bb0f7c0ca657fcd2b4fdd501e8023de0b
SSDEEP 12288:w7/S9DFV7Xg9FjxdwqQtxuRezBghOQBaD2YXVsIqJp3mL:wrEFpOZxdwqQ+0FKBMVQJpC
TLSH
T14DB47C263AA1C075D6B282B14E6DAB0954BEBD700B7746DBA3C84A1D1E74DC1A733337
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	FileIOTest.exe

C:\Users\Admin\AppData\Local\Temp\FileIOTest.exe
"C:\Users\Admin\AppData\Local\Temp\FileIOTest.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2212

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads