0f3c9324c27ec560c0d8724a843654102fad776db466179bec07a98d02d791ef

Analysis

max time kernel
148s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/08/2026, 15:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
0f3c9324c27ec560c0d8724a843654102fad776db466179bec07a98d02d791ef.dll
Size 4.4MB
Sample260806-sj53esae92
SHA256 0f3c9324c27ec560c0d8724a843654102fad776db466179bec07a98d02d791ef
MD5 69bcfd55e3064f7114f5c9d3c5aacb7b
SHA1 1eb76d68fbcb1e8f770c30881501461bc9a39c3a
SHA512 d522ec7031c202bcffff77ce29a3e4fcc86306f5f408ed780114235ba4696afb8727f02ec5b4e17005312b9bf89639ecc6a6118db9cf10791a7e4edfc70051fe
SSDEEP 49152:kpLbjpuYf8R7UIThdfgavAqB3OmEmTs8n0+ZUtPKS8uwp21OSfyUgPeZzlIsyWVE:kpLJubUg/gQ3ONmT5nBUtIuwmiUDj4O
TLSH
T10326BE22BB4280B2D8EE02B5116F9B7F493D6F24473489E3D7D02E6E59704D26A3F356
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 2496 wrote to memory of 6136	2496	rundll32.exe	89

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0f3c9324c27ec560c0d8724a843654102fad776db466179bec07a98d02d791ef.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2496
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0f3c9324c27ec560c0d8724a843654102fad776db466179bec07a98d02d791ef.dll,#1
  2⤵
  - System Location Discovery: System Language Discovery
  PID:6136

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads