2b6d2563021a7b1b130035d54b08627398767aa1f313f1cf69694500f8af63b9

Analysis

max time kernel
148s
max time network
149s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/08/2026, 22:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2b6d2563021a7b1b130035d54b08627398767aa1f313f1cf69694500f8af63b9.exe
Size 4.2MB
Sample260808-2x4aesel81
SHA256 2b6d2563021a7b1b130035d54b08627398767aa1f313f1cf69694500f8af63b9
MD5 9e416ec64ad7bb088f49cbf91a102fb1
SHA1 a7032872f3153ba3dd7b85e8895067c51fb025ab
SHA512 ecb839e5169f260596c5f089714f52ee9aaaa596588d7812063a8a0590631ed8d079f4115acc9c834e75c426eee8a4f912a9a78d9220e26ea1c1ad6178fd098e
SSDEEP 98304:g8S7Km3T8xu9E8A2mWhFxSIsZZWn41nPyKxYs8ajOAWySPnke7E:g8DM68A2mWhFxS7sunKK/8ajOOeE
TLSH
T14416D0313E91C4F7C11316B09A08F676EAEDA66C0B3A41C762D0BE1C7A71F83D61599B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2b6d2563021a7b1b130035d54b08627398767aa1f313f1cf69694500f8af63b9.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4840	2b6d2563021a7b1b130035d54b08627398767aa1f313f1cf69694500f8af63b9.exe

C:\Users\Admin\AppData\Local\Temp\2b6d2563021a7b1b130035d54b08627398767aa1f313f1cf69694500f8af63b9.exe
"C:\Users\Admin\AppData\Local\Temp\2b6d2563021a7b1b130035d54b08627398767aa1f313f1cf69694500f8af63b9.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4840

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads