cc636c9fad1426dce21130b9ec20ec12993791725e88f73dcda05a2a0c3f808e

Analysis

max time kernel
149s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 16:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
lnencrypt.exe
Size 155KB
Sample260809-vgrhcsscme
SHA256 cc636c9fad1426dce21130b9ec20ec12993791725e88f73dcda05a2a0c3f808e
MD5 b42eb3aa86ada729f4225e7ccb4bac30
SHA1 276a2ea9d8ae4cbb265a6199cd4c661838528435
SHA512 bfb65e9d656f1e1a227056f90cab685d51a7f1ed297ef04e48c4d962c28d3f1dbcbbe00d78b397c517fe870ace49076dd798a7d54eed9f472a8644f3ee6aefe7
SSDEEP 3072:FZzLaEotucfjMnyfPUSg8CXhmbXY7kF+XYiOuUMPFkggjKfVVerr979qAJ:FtLa9IcbMyXUCUhvkFIVf52bKVeN9qAJ
TLSH
T1E4F39E5475D0C871D83A24351A75CA796E7CF9300F24C9EBA7881EB75F342C0AA3AD6B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	lnencrypt.exe

C:\Users\Admin\AppData\Local\Temp\lnencrypt.exe
"C:\Users\Admin\AppData\Local\Temp\lnencrypt.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1076

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads