03b21e45d96ae23ec5cedb8597bf10b597cd50c9c3cde78f2ff8cd71a36a23e5

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/08/2026, 03:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
03b21e45d96ae23ec5cedb8597bf10b597cd50c9c3cde78f2ff8cd71a36a23e5.dll
Size 558KB
Sample260813-drvt4a1akd
SHA256 03b21e45d96ae23ec5cedb8597bf10b597cd50c9c3cde78f2ff8cd71a36a23e5
MD5 51d5e486e83fd92a8e136cc979691265
SHA1 155a6a7e01b0023ece46d70fae919df5761f732a
SHA512 222c15924d559ebeb5ad3939fae98efc80932efd488b9e5548a03758d3ac33ca2087cde20814525ffa015376e51bf975d52ca8fa2d92cc7f05a2b3126f804cd0
SSDEEP 6144:BEFbDC+3FKlpi074R66N7zYg7uCI9H5SIS1SBEymNY5OIKv8Uox/uRolQFc:IKlpi4gtmP00O1jnoyy
TLSH
T171C45C1B7AC57A62F2E30D345A2D762254BD3D32C535F60AB744EA4D3C71286EB21B0B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 5036 wrote to memory of 1556	5036	regsvr32.exe	87

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\03b21e45d96ae23ec5cedb8597bf10b597cd50c9c3cde78f2ff8cd71a36a23e5.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:5036
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\03b21e45d96ae23ec5cedb8597bf10b597cd50c9c3cde78f2ff8cd71a36a23e5.dll
  2⤵
  - System Location Discovery: System Language Discovery
  PID:1556

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads