12deddd0c4039eec4083d958aec2328309d55c47bc40989f54660c32542c875e

Analysis

max time kernel
898s
max time network
380s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
09/08/2026, 03:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
tools/clientdl.exe
Size 1.6MB
Sample260809-egqm3agf33
SHA256 12deddd0c4039eec4083d958aec2328309d55c47bc40989f54660c32542c875e
MD5 8eb123186f6df0efd4a9c74112fc4f21
SHA1 0759009bef2f39748c41cf00c1bcb8a66c7ec4ff
SHA512 bc940534079646c178449e627a39edf9c143c78b73d6d231f22946ea61863cb32a7db88df11e9d9e9f229c46f2da1c6713c00c2cc9feb4f3148551c64a14ec0c
SSDEEP 24576:eD/aZidDYapYqqf3TqAnLieCcr7ecNoCwOlr07qjew95gJIJtmwuRC5r6mECLT2F:94qOAh/eClg+Nb3z6PeT2QJM
TLSH
T15C75BF2179428131E5A601B09CBDABB7897DAD245B3448E7B3D40E3E89311D37A377AF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	clientdl.exe

C:\Users\Admin\AppData\Local\Temp\tools\clientdl.exe
"C:\Users\Admin\AppData\Local\Temp\tools\clientdl.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4608

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads