542cc398a0373199f93fe53546c757d16a979f44c3d13e920febc2beb0bbd493

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/08/2026, 23:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
542cc398a0373199f93fe53546c757d16a979f44c3d13e920febc2beb0bbd493.exe
Size 76KB
Sample260806-3jdy2sch29
SHA256 542cc398a0373199f93fe53546c757d16a979f44c3d13e920febc2beb0bbd493
MD5 3b8161fa9240bc24c69f19d12a971c89
SHA1 5214604010666d5169aa92b2f4ca212efec933a6
SHA512 da019ec162514f9c8dc6f410e5c417297d13753997f54a1e0358d225616b9569e19a06f3d605c925b133cf7fb488dbd679957826e66f038c69e9cb288d8a8773
SSDEEP 1536:VHnnXKpmhVhkDNpNeLk0jde+vlnYHESGkUw2f9:VHnXimhVhkRTeLk0ZeSlnUEZkw
TLSH
T11E73B806F6F7AF15DEB21A7959B7154A1B2BF450B931C30F266C00196FA3B406BA331A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	542cc398a0373199f93fe53546c757d16a979f44c3d13e920febc2beb0bbd493.exe

C:\Users\Admin\AppData\Local\Temp\542cc398a0373199f93fe53546c757d16a979f44c3d13e920febc2beb0bbd493.exe
"C:\Users\Admin\AppData\Local\Temp\542cc398a0373199f93fe53546c757d16a979f44c3d13e920febc2beb0bbd493.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:6140

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/6140-0-0x0000000000400000-0x000000000041B000-memory.dmp

Download