141db6d2f1f75b4179322ab03604a0ed19c971e718a55533d9ea471456d1f858

Analysis

max time kernel
148s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/08/2026, 09:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
141db6d2f1f75b4179322ab03604a0ed19c971e718a55533d9ea471456d1f858.dll
Size 811KB
Sample260810-l1daeafd34
SHA256 141db6d2f1f75b4179322ab03604a0ed19c971e718a55533d9ea471456d1f858
MD5 a434b35e0f814198e77e5214e3141ce6
SHA1 b516a072e0a2fd007586747567a2280f4e85db7b
SHA512 8dc435b14ad30453c6f21639b7f1521858bb25c36df88df33d387ae4acf0ab4a05753ad90fc55ea52404f45b3b877ae4b39177e9f97354576cbf65cad7ddbbf0
SSDEEP 12288:YUIe4NLjNjm4BDKqVlqNVB2/oHPl2feM67ojzV+YzV+:R4LdDKqzqHB2yl2
TLSH
T1D4052B0832E8DA16F13F87F6057145149BF8B42B9587E70E8DC230EA3EB6791854BE5B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 4848 wrote to memory of 3212	4848	rundll32.exe	89

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\141db6d2f1f75b4179322ab03604a0ed19c971e718a55533d9ea471456d1f858.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4848
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\141db6d2f1f75b4179322ab03604a0ed19c971e718a55533d9ea471456d1f858.dll,#1
  2⤵
  - System Location Discovery: System Language Discovery
  PID:3212

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads