8d8189c1c77b4827b1600f5af557cfeafb564559d0e6a7de5222c0cabdf18101

Analysis

max time kernel
148s
max time network
129s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/08/2026, 23:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
8d8189c1c77b4827b1600f5af557cfeafb564559d0e6a7de5222c0cabdf18101.exe
Size 66KB
Sample260806-3k79aach46
SHA256 8d8189c1c77b4827b1600f5af557cfeafb564559d0e6a7de5222c0cabdf18101
MD5 46326fcade9e0f346280fba94f605fd2
SHA1 7e285bddbe9f7ede8601eb1a48afde099a179a16
SHA512 6685b4a6e07ef98c07c40edeb3ebb96f378a010b4b7aac58b17762dd009d3e4d47be3b0c0d2008c0036b8b4f1820611ed34e26140f89bd6b0bb4d72bd8b2e12b
SSDEEP 1536:zAcw+UFscdeJdSzElwN3xT27MXQb4KzxcVw2PpZG:zAcl6scZ2wN3xT27MXQb4KzxcVw2B
TLSH
T1C1630702EBD75F42DDF22A747877560A4677F465BB30470F2A4810186EB3FA04ABB35A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	8d8189c1c77b4827b1600f5af557cfeafb564559d0e6a7de5222c0cabdf18101.exe

C:\Users\Admin\AppData\Local\Temp\8d8189c1c77b4827b1600f5af557cfeafb564559d0e6a7de5222c0cabdf18101.exe
"C:\Users\Admin\AppData\Local\Temp\8d8189c1c77b4827b1600f5af557cfeafb564559d0e6a7de5222c0cabdf18101.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4328

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4328-0-0x0000000000400000-0x0000000000418000-memory.dmp

Download