d928bbea203fdbe7e8a7f7bdce505c83029be10d1f2c8becfc58b489f206b7fd

Analysis

max time kernel
150s
max time network
136s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/08/2026, 09:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
d928bbea203fdbe7e8a7f7bdce505c83029be10d1f2c8becfc58b489f206b7fd.exe
Size 1.2MB
Sample260810-lj6kmaware
SHA256 d928bbea203fdbe7e8a7f7bdce505c83029be10d1f2c8becfc58b489f206b7fd
MD5 2282ebdb2ddd579138fd349a3684036f
SHA1 b6a571d645ceae61a606569366d0661f7476a2e3
SHA512 8e3b5f209af9766b012a495d9e176c9d9f2780a97506d88621dec85a1c4cfb6b9cce4c96cc70b66bb84cf53d4c3ed0ceec92df9a24bed633ab6b725024c36d63
SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOtiruAe:AylFHUv6ReIt0jSrO
TLSH
T1FE557C02B64DC2B1C29C157136BF77366D348B5A1A35CA93B7E0CD692D32761EE2720E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/4464-0-0x0000000000400000-0x0000000000540000-memory.dmp	upx

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	d928bbea203fdbe7e8a7f7bdce505c83029be10d1f2c8becfc58b489f206b7fd.exe

C:\Users\Admin\AppData\Local\Temp\d928bbea203fdbe7e8a7f7bdce505c83029be10d1f2c8becfc58b489f206b7fd.exe
"C:\Users\Admin\AppData\Local\Temp\d928bbea203fdbe7e8a7f7bdce505c83029be10d1f2c8becfc58b489f206b7fd.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4464

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4464-0-0x0000000000400000-0x0000000000540000-memory.dmp

Download