a4a5a82d67befeb71504c4f7ffe6f94c25300666f1c5434aa2d2f3b38ea31ef3

Analysis

max time kernel
148s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
TeamViewer_Note.exe
Size 662KB
Sample260804-pg8hzsem41
SHA256 a4a5a82d67befeb71504c4f7ffe6f94c25300666f1c5434aa2d2f3b38ea31ef3
MD5 99a335140cd26250425b977a21b63f16
SHA1 53d74fbbb56148031f1d2717c110b6d8628a26b9
SHA512 ce1f2bbaec9d95fa1559177af3b3d5ba0d1cd18781778bed7e46cfe7b305c5d7bb88c8b95eb78876b63513f0ab9f1eb16814a780f7c49ce95cb16cbfc7a892fd
SSDEEP 6144:nDP34V0zhw3O8RGLX7dOLgxuaT8A9CLTRwdSBUYyrDD:734Kw3O8ILXRckZwAQ3RwGOrDD
TLSH
T1D3E4D570A582C123D423153DEA64D6F7142BEDF0DBA079E726883E2B7A343C5953992F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	TeamViewer_Note.exe

C:\Users\Admin\AppData\Local\Temp\TeamViewer_Note.exe
"C:\Users\Admin\AppData\Local\Temp\TeamViewer_Note.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3304

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads