58475ce20b57b9a07eefe8c9bb9a86487703c59de7e4a044459d6e7f981fe0a5

Analysis

max time kernel
148s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/08/2026, 23:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
58475ce20b57b9a07eefe8c9bb9a86487703c59de7e4a044459d6e7f981fe0a5.dll
Size 77KB
Sample260806-3gbe5scg95
SHA256 58475ce20b57b9a07eefe8c9bb9a86487703c59de7e4a044459d6e7f981fe0a5
MD5 aff00d7779a245cded39a38ca08d4612
SHA1 545cf982c2612d623aa4be572cafeb87893c4846
SHA512 9714a0fc31faa562b668add2ff45f1ae0968c6a65f7e8486c8faa1610f61c7eff458e3feb85dd965363e0d01c9f6f82afac4c6f0bbbdca5e54c6503d8db03811
SSDEEP 1536:pyZfY/2aeP85cErK7eSjBfNPtqPwmF2pHkd3E/RN4ZmAaxW6cjK6r/nVEcmsxEIx:pyZ/RU5/rK7eSjBfNPtqPBF2pHkd3E/3
TLSH
T12B730725EFEB8D17F9A24A3959B7836A1671FC0F0B34894FC64C722E4970B11E5E4382
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 4292 wrote to memory of 3352	4292	rundll32.exe	88

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\58475ce20b57b9a07eefe8c9bb9a86487703c59de7e4a044459d6e7f981fe0a5.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4292
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\58475ce20b57b9a07eefe8c9bb9a86487703c59de7e4a044459d6e7f981fe0a5.dll,#1
  2⤵
  - System Location Discovery: System Language Discovery
  PID:3352

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads