0fb0aa48d41a472c67e4c00ca6193c0a18342b70a0a06cce11f3a8b7c1874faf

Analysis

max time kernel
148s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/08/2026, 03:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
nandstudiosinstaller.exe
Size 57KB
Sample260810-dst9ysdg96
SHA256 0fb0aa48d41a472c67e4c00ca6193c0a18342b70a0a06cce11f3a8b7c1874faf
MD5 1cc0dd6eff950fbb6c18427e16d01b5f
SHA1 806894f2fd47a95c7668f3e3d90951b8fd0c1ad4
SHA512 8b961414b8a35dd5cb7e4ffb6df857c012d2178244ecf94bba16c93b1fb0a14b4a5e47795b25b6cf56874a812808f0a26db40a9a885593e55133fa5fc996bfef
SSDEEP 1536:JMANkMvwI6tozkPP3lLuBZ8GXGTR/wTASOOn7Pm2r:tvvl6tozC3lBGXGTRgASh7Pm2r
TLSH
T16D43D6957EE58EE6EA91A33E50DFC32E972CF5D08B334B53F76075304B036922598282
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	nandstudiosinstaller.exe

C:\Users\Admin\AppData\Local\Temp\nandstudiosinstaller.exe
"C:\Users\Admin\AppData\Local\Temp\nandstudiosinstaller.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3448

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads