0078c747e4af70ea320aebcaf1b82bc050cfd84182c67995bbae414d5c52415a

Analysis

max time kernel
150s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/08/2026, 12:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
0078c747e4af70ea320aebcaf1b82bc050cfd84182c67995bbae414d5c52415a.exe
Size 482KB
Sample260807-pvj3jsdr7w
SHA256 0078c747e4af70ea320aebcaf1b82bc050cfd84182c67995bbae414d5c52415a
MD5 ca576504842f84fc199110741422105e
SHA1 e596f4b48f5087f85fb6881f1d84eff1b5db69f1
SHA512 b9222be2cea174cb394bbcf7a9bc5efe0c8a52c64b009d134c99f449de72284c094825c39680539ab3f0dd3715c5328e371d87ebf19242a92b84686c211bbc94
SSDEEP 6144:voxBxE7t6QuApGVKMlZLx0Tn9DduAOy/lYCRQR:voFE7t6QuApjMlZLIfucYdR
TLSH
T106A4C998282CF230DB75537367B50E64F4887019F62B2CF3D781AA849E18D917F694BB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	0078c747e4af70ea320aebcaf1b82bc050cfd84182c67995bbae414d5c52415a.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3416	0078c747e4af70ea320aebcaf1b82bc050cfd84182c67995bbae414d5c52415a.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
3416	0078c747e4af70ea320aebcaf1b82bc050cfd84182c67995bbae414d5c52415a.exe

C:\Users\Admin\AppData\Local\Temp\0078c747e4af70ea320aebcaf1b82bc050cfd84182c67995bbae414d5c52415a.exe
"C:\Users\Admin\AppData\Local\Temp\0078c747e4af70ea320aebcaf1b82bc050cfd84182c67995bbae414d5c52415a.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:3416

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

launcher_config.ini

Path C:\Users\Admin\AppData\Local\Temp\launcher_config.ini
Size 348B
SHA256 2bd75b7e4cf2def3b8371a0ec9b8e54ae9ead37132f27874e2b378a3ea528386
MD5 d4f141723edfe6ce5de5a1348f0704ca
SHA1 50cd7f33f0bf069c1d341d1e0e6d631b3f700e1e
SHA512 b5878de2115831a0026761cf2f619f73d29746f0f7d34bf7ea93ab6ed5e7fc1a3f9b6227e9fb843cf7f4c67a523a74fd11cb6ff1dcabe60b96522ad8b30e4f57
TLSH
T123E028800D002841E076D46CF8931BC0E09AF00D44C15074FF2446DE197C43D1698903
MD5 SHA1 SHA512 TLSH

Submit Download