5cf654f1853a4dec3b2f360bca5de7e3e1c4d72820c502e7e7fe646c9e33a545

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/08/2026, 00:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
5cf654f1853a4dec3b2f360bca5de7e3e1c4d72820c502e7e7fe646c9e33a545.exe
Size 76KB
Sample260814-ajfteshq51
SHA256 5cf654f1853a4dec3b2f360bca5de7e3e1c4d72820c502e7e7fe646c9e33a545
MD5 82852538fe17d622a1caaaf710f3d73e
SHA1 580e10a23fc72c20a274f2dc863c07487a278b4f
SHA512 3aa9fa4cd5664809f295987f52461388fc0d3da6e03a30f484daeb405e043c8a699f5bb779188f792bad2913d332cc91c7a56b9a0fc0df3e8d8718f9a992cf1f
SSDEEP 1536:kx79ZjSHOTZX3FD0H42aWsgNFBHVPJsj:kx7IOTZX3FD0H42vNFBHVPJe
TLSH
T1957332045FE86128F9F35F39BA7600985B26BC9AAF30D5CF16D0841C4C76DE8E5B4B26
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	5cf654f1853a4dec3b2f360bca5de7e3e1c4d72820c502e7e7fe646c9e33a545.exe

C:\Users\Admin\AppData\Local\Temp\5cf654f1853a4dec3b2f360bca5de7e3e1c4d72820c502e7e7fe646c9e33a545.exe
"C:\Users\Admin\AppData\Local\Temp\5cf654f1853a4dec3b2f360bca5de7e3e1c4d72820c502e7e7fe646c9e33a545.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1812

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads