de6c41d2f4ea91c5618650c84d2db2bae5a84535b3adc8b101cae01d957b7909

Analysis

max time kernel
148s
max time network
116s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/08/2026, 17:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
de6c41d2f4ea91c5618650c84d2db2bae5a84535b3adc8b101cae01d957b7909.exe
Size 347KB
Sample260810-wk51lahf59
SHA256 de6c41d2f4ea91c5618650c84d2db2bae5a84535b3adc8b101cae01d957b7909
MD5 9992d6fef497513d69e18645b3d76499
SHA1 b24280f8b1a4cd87f464c24a7fa54247b8b48b1c
SHA512 29c30b7a214369a44658b5592556d8ddbe1f2dd2334fc83cf5932fd282c592e9decb8d6c4d8fc0ed5b86d34ec686509f44bd2da69348d6c0ee8248f92ed0bde6
SSDEEP 3072:psymrj2pat7qlQljOsRfnwD8h3KcFclZzeLRkeWhZ5KoSnDmSHu6M1PuYw+eKAgg:psW9SRuYFWlNsbw5kmp6M1ZAOJ+RY+
TLSH
T136745B00E741A139F9B309714FFD4A6A953CBD210B2550DBE3C81E6E5EB6AE17A31723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	de6c41d2f4ea91c5618650c84d2db2bae5a84535b3adc8b101cae01d957b7909.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4588	de6c41d2f4ea91c5618650c84d2db2bae5a84535b3adc8b101cae01d957b7909.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
4588	de6c41d2f4ea91c5618650c84d2db2bae5a84535b3adc8b101cae01d957b7909.exe

C:\Users\Admin\AppData\Local\Temp\de6c41d2f4ea91c5618650c84d2db2bae5a84535b3adc8b101cae01d957b7909.exe
"C:\Users\Admin\AppData\Local\Temp\de6c41d2f4ea91c5618650c84d2db2bae5a84535b3adc8b101cae01d957b7909.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:4588

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

launcher_config.ini

Path C:\Users\Admin\AppData\Local\Temp\launcher_config.ini
Size 348B
SHA256 f95dc455cfbc412c8731f7ae7e5f3542146a6c81bbeaad7927aaf7679e743b80
MD5 776cf1466ce27b1a2f4c348cf42f34ad
SHA1 6587ad8df53ef0ef6a53102f1a0be71865244ab6
SHA512 1fcfb09fb42e64340dbebdafd944e24ddf4b89b9a29f9444b3368b0424fec68b882e95b1221c1ef391bcefa334e71804e629cf2d2efdbf57dcc04daa9c02150a
TLSH
T1DAE02D800E002842E076E4ACF8A71BC0E0EAF00E88C19074FF2846DE1ABC42D16E8A03
MD5 SHA1 SHA512 TLSH

Submit Download