671b93e7cf1401147ed9eeab4e6e21bcc782a8e2f92ea520a51d25e0512f872b

Analysis

max time kernel
149s
max time network
138s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/08/2026, 09:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
671b93e7cf1401147ed9eeab4e6e21bcc782a8e2f92ea520a51d25e0512f872b.exe
Size 3.4MB
Sample260807-lcdk9sbk2x
SHA256 671b93e7cf1401147ed9eeab4e6e21bcc782a8e2f92ea520a51d25e0512f872b
MD5 68f21c9b13e2dafe551bf4b35b6cbcd5
SHA1 c19a8a0c2dace7f21a6a6d850b674574a2ea30eb
SHA512 05580f8354e24310438e61ae1567a465eba04bc13afa792c2c27a18bbc6ca628af47b35744f280b690ad6288051652f9e8cb780f56b78c7c29679213e8cf46ff
SSDEEP 49152:zq12bmPJQf+0EETodJLe4Q/fPJY7nho8pQIGutmVv:m12tf+XET61e4Q/+nGCQIQ
TLSH
T17CF58E3AB7909477C4A35B74CDA793C86835BA602E74988B77E00F1C2F7868176193DB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	671b93e7cf1401147ed9eeab4e6e21bcc782a8e2f92ea520a51d25e0512f872b.exe

C:\Users\Admin\AppData\Local\Temp\671b93e7cf1401147ed9eeab4e6e21bcc782a8e2f92ea520a51d25e0512f872b.exe
"C:\Users\Admin\AppData\Local\Temp\671b93e7cf1401147ed9eeab4e6e21bcc782a8e2f92ea520a51d25e0512f872b.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2336

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

!Setup.txt

Path C:\Users\Admin\AppData\Local\Temp\!Setup.txt
Size 11KB
SHA256 35f50de410a013ce8bb3f371783ebc7e3e9606048aa7dd6b67ff8a663b810bde
MD5 ae69074072c8359801cf2d1f0afc4047
SHA1 03159f3aae7d646c1cd1063d2f1f9c9eb21b37a7
SHA512 596094cbc40e62b1a72968c2c90ed0e8cdeb33f3337afc9ebe061b4f248e3f40e1f3fa0aa07e326c8fc48159649415996c3391686b0225f572f783f2c4054362
SSDEEP 96:TUNfX1K2U0WKMF1lGZ0SwrPcU3JXxA0TyNE0Vtw6BSRN4ROefPlPPP3l3LKQAy+f:AJFgM52SVNwRNTefPlPPPBKQAx
TLSH
T18532F03092F588CDD88781CA7B762585E5F532FC27D0068D36EA40E73E89D4C297866F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

!Setup.txt

Path C:\Users\Admin\AppData\Local\Temp\!Setup.txt
Size 6KB
SHA256 5f97f1325fcfc3169cd03f5a251febb87e6f7015ab57d950ad2c3252ec676110
MD5 ac54a12b27192e2ec41ad1ddb57259c8
SHA1 71162c7824faba7d1021352ac7cefe04e175eb9b
SHA512 e6be30af3b4bc9a3470374df43b44e588c226e2bc5e48522cb65db29b3338141e6c0b8b91f333eb170b0b11c3d5d761cbdce1ad84b830738b08842ab9e8c25cb
SSDEEP 96:TUNfX1K2U0WKMF1lGZRSwrPcU3JXxA0TyNE0Vtw6BSRNW:AJFgM5TSVNwRNW
TLSH
T177D1FD34C5F8848AEC4752AF30762920B9F377926EC027DC55EEA8AA5FC8D4958005FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Command.ini

Path C:\Users\Admin\AppData\Local\Temp\Command.ini
Size 7KB
SHA256 ce999be0cee2992adf22aeab39456adba4e1bca070bb33123d6a0f4f8485375b
MD5 2fdb74e91d1b2cf05db67666cd76af9b
SHA1 fa204f181950cc7e45eaee866053b8be67d14d75
SHA512 a9988c7f7b3754814b224b61abc4bc5b3720fa594216ddc141e13027b6847aee2c34c93d4dc7ea5fbd8d28391d1e8a48e36554a2178d40ece109369af2e33e5e
SSDEEP 192:s+jQ/V9nu9igW4VcURp8XCnBeUy3NjUy3NGN:/wT4i8VcULxN
TLSH
T142F160BEB28CF5273CA33485FCF56082A7FA5087E1368756E5EAE1D97AA54CC1136130
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Exps.ini

Path C:\Users\Admin\AppData\Local\Temp\Exps.ini
Size 5KB
SHA256 121477f0b240bc373e088b3cd180885c220fd5d779e455869e49787b304964c3
MD5 99682638a66374d2a756284854494f0a
SHA1 7077265660471c0703502b1c5c19e34c7a4f28f1
SHA512 d11a79d5c9adc88913099b8e28171f97da61e4650931bb5eeaef80a328d328e8b1b5ff6da746a2f5ca077fca01748558c2205d109291b4903a57f8d3a5d300cc
SSDEEP 48:NTkQFw2c9iVBbaMPlqikW+SVZKX913JtK+RaAdJdIaBe+proIrKFizojZpxgyIav:ZtFw2hVBeuqBSVoDi+AAfea0urzfu
TLSH
T10BB18C55C34842B9F0475B70B961F9B712F53203EAF1C6B7CED56BA09A258AC80CDE63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Global.ini

Path C:\Users\Admin\AppData\Local\Temp\Global.ini
Size 1KB
SHA256 35f407fbb1c08907c44ba6227ef0a42abd5dcb1119ec5599dd00eecfc1524189
MD5 7bebd42c827dbed64a482c4f4fff2737
SHA1 d63004c33794a1981ae2b427000db0a34875d3af
SHA512 2005d8ac7ad50607b2bdd64e479311ef032fff0603632f4964359ca0672997bad94ff6c1cef258deff449143fc70075336b17e7f019c54e653655e2b5761a61a
TLSH
T13921CBD01DBE945C2505E1AC653BAA03BBDBF3C4EC3C0249B6DC98A51C45BCF50C5976
MD5 SHA1 SHA512 TLSH

Submit Download

Global.ini

Path C:\Users\Admin\AppData\Local\Temp\Global.ini
Size 7KB
SHA256 62e62b02fd453576093903a1d8e3ce76e70ba01bae2de1cec0ae7dcb73a0bd7e
MD5 797668f32dc7a643b1ba499daa1644a5
SHA1 5a6b1a34f030b046a129cf9e946a7d55ed7cdeb5
SHA512 4b026e0a324efe2a5d3104cbf54d324a4f86dc99f3dc73292dcc790f0488648ff51f17212d057470f0aab30b102604f684d9c56733e5bbcb5a3765f7c885a731
SSDEEP 192:RGo+M+4mEAV0PejaF+OuuX+elUWyCTqGhLCS+WA7KCziqGTG2imjG7C2aKmGAZSP:8a1voIu
TLSH
T120F1F4E15DBC899C2941D12D61BB6707B7DBE3C4AC3C5285BBCCA8A52C90BCF50C8976
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Global.ini

Path C:\Users\Admin\AppData\Local\Temp\Global.ini
Size 6KB
SHA256 7dbd05cb94b4a9bf07244ceeb2c9a9d89d1ac4f1edffdbb33e171302363ab690
MD5 eb12a8ec86a66018c2a9cdd6e76a86de
SHA1 f3d327dd4ba9859b918eef4e13dc47909074cf02
SHA512 25a8c31ae5ee61cbc874bc173355c5dff365d48dcaddd60c8ec031532605b2fdfd7408e68e4e5a6080f8abc87e5da5d3b04fe6f06a0f7ae540d21a279ac08603
SSDEEP 192:RGo+M+4mEAV0PejaF+OuuX+elUWyCTqGhLCS+WA7KCziqGTG2imjG7C25:8a1voIE
TLSH
T114D1FFE11DBC899C2941D12DA1BB6707B3DBE3C4AC3C5244BBCCA8A52C90BCF50C9976
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Global.ini

Path C:\Users\Admin\AppData\Local\Temp\Global.ini
Size 7KB
SHA256 2f2101cd0f9cd1a2ca7f910c46c97b2161aebce77f2f6b9e710c6ba04cbda529
MD5 ed1a1d22290b8174772c1e8c2e5758fe
SHA1 a87952b8627a8d828131a9a5808b9b3d3a4be02a
SHA512 2f7091c6eaef0d4076691b15f1fddff078bf2fc9761c59555a91c1ed8050704684e645e37c8266be7d788d420c7e7b8f7a63edd6b29e0ee9d47a4f277d38ea09
SSDEEP 192:RGo+M+4mEAV0PejaF+OuuX+elUWyCTqGhLCS+WA7KCziqGTG2imjG7C2aKmGAZP:8a1voIz
TLSH
T137E1F3E15DBC899C2941D12D61BB6707B3DBE3C4AC3C5244BBCCA8A92C90BCF50C9576
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Global.ini

Path C:\Users\Admin\AppData\Local\Temp\Global.ini
Size 4KB
SHA256 4f387e8d554e1f6a218fb3af09efec19906c0f3cdfa92ebcb73b4685756ca71c
MD5 204beb33417d0d299ddcca95a964a2e2
SHA1 b767ba7fc7528871d223754241f494e823c1585a
SHA512 e027b21923059f8ec78fc284753548238a40428b07785fd1974488094bbcc527a5343246923fcb5e6f3927a6feded22566fd9658f413de4f87d203cf691d4524
SSDEEP 96:Hb9Go+M+4mEAV0PqzjRQF+OK3uX+elUW10CTqGhLCS+WA7E:RGo+M+4mEAV0PejaF+OuuX+elUWyCTqY
TLSH
T19DA1F0E15DBDC95C2941E16DA1B76607B7CBE3C4AC3C0244BBCD98A52C90BCF60C9976
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

String.ini

Path C:\Users\Admin\AppData\Local\Temp\String.ini
Size 10KB
SHA256 5fe4590a2fe6a5c6b72e6bc333b9308f95adca26e68268b88c34f95233f7aac7
MD5 d69cd373c2246890e0f99bf70b10a82a
SHA1 2c64cef6ebdb2703e76692f0fb6d64fe36061952
SHA512 d3ecf820b405286d18bd34d7d16d6ec527bd06da282972cd2381b4a88aac446021c975a2175d89bc09d59f42b4d15494c631fee5238118da697b1e410d25a6ab
SSDEEP 192:1l+rgOSIVlNQeM87Osd23N6Pc2/hOby9HZlE82vtUeLErFjn2qB4y5WEz9gM3:1l+LjQeM8hvObyQtUeLE5qy5WEz9gM3
TLSH
T1BD32F823F00D10365C77F58494393A5EF0CDDA8214442EFBCB92F8CA496A96D361E3E1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2336-9638-0x0000000000400000-0x0000000000B71000-memory.dmp

Download

memory/2336-0-0x0000000000ADE000-0x0000000000AE0000-memory.dmp

Download

memory/2336-1-0x0000000002AB0000-0x0000000002B28000-memory.dmp

Download

memory/2336-3-0x0000000002AB0000-0x0000000002B28000-memory.dmp

Download

memory/2336-10-0x0000000000400000-0x0000000000B71000-memory.dmp

Download

memory/2336-11-0x0000000000400000-0x0000000000B71000-memory.dmp

Download

memory/2336-11644-0x0000000000400000-0x0000000000B71000-memory.dmp

Download

memory/2336-11646-0x0000000000400000-0x0000000000B71000-memory.dmp

Download

memory/2336-11647-0x0000000000400000-0x0000000000B71000-memory.dmp

Download

memory/2336-11651-0x0000000000400000-0x0000000000B71000-memory.dmp

Download

memory/2336-11653-0x0000000000400000-0x0000000000B71000-memory.dmp

Download

memory/2336-11655-0x0000000000400000-0x0000000000B71000-memory.dmp

Download

memory/2336-11657-0x0000000000400000-0x0000000000B71000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads