b294fb0872c6b921239027ffd88b804a7a2239f5bb2c77f3af9c2177456fddcc

Analysis

user interaction
yes
max time kernel
148s
max time network
115s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/08/2026, 02:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
rc7.exe
Size 1.3MB
Sample260810-csc51attdw
SHA256 b294fb0872c6b921239027ffd88b804a7a2239f5bb2c77f3af9c2177456fddcc
MD5 a522edac6a0f62abdb7eab22cc264830
SHA1 92be89cdd6b82d6f4d97274bde1fd3c4ee026d65
SHA512 27b0ae28330ecec365ac31f6a2e0967a13716dcad029318a89ea4ca43c081349c4d8ce98585bd96bd08f10fae536d23746067d82df9acce7d2e5aebbcde668c0
SSDEEP 12288:Nk5NHUUzXbu37wHYsR2k1u+kfXrd5CImFg/PPPzhsn9LRbRa/bAM/:NCeUzLurwHVulvrHCaPPPzOrRazAM/
TLSH
T1235529207146A432C58AFAFF6A55E768513B2D9ADF078F9794F0321A087E0D3DE2D94C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rc7.exe

C:\Users\Admin\AppData\Local\Temp\rc7.exe
"C:\Users\Admin\AppData\Local\Temp\rc7.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4372

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Config.txt

Path C:\RC7_THEMES\Config.txt
Size 22B
SHA256 af4001bc89595271e2bed34e5da3eb1babc55cfdedf61c95e1331eef744f4de0
MD5 5f89f0e5599fa39d352905ab3ce395bd
SHA1 b1718804496dfae1f78f64cb011754f7089d7719
SHA512 fd6db97a0c1d5366843474c3190b065220de6ac74ac21c455333c47aac2e3ce59c3e25e711b3262cca229954754fd00a9d89c8879d24ff3a046dd5509ccd8003
MD5 SHA1 SHA512

Submit Download