46747414d28db57aba08bcebc4654cd84394572b448933fbd0e852061897d40b

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/08/2026, 00:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
46747414d28db57aba08bcebc4654cd84394572b448933fbd0e852061897d40b.exe
Size 2.5MB
Sample260814-bak78aed72
SHA256 46747414d28db57aba08bcebc4654cd84394572b448933fbd0e852061897d40b
MD5 6cc33e755a99bbc6816a851bf12f7394
SHA1 1c412142144ac498524dd308bc0fe35a88cb495a
SHA512 7a95d2615fa945a3e93aaa26399435f4f75a36a3dbd7c8429ada9351e7cac48c81dfc28001fcdecf3bf6381c6784a15e0bbddbc5a19f9a8bfefe9abe29ad3e31
SSDEEP 49152:icsUr4YuqnG8M9nQmyi6ajwVvlLpcqjrYPgZTuv8XaQfpn+k4dFRMi8nFY:icsUr4YPG8YnQ+6ajwVvJmOAv8XaQfpC
TLSH
T1DEC59E1B6551C072F5920238A129937FB879DE30031AD2CFCBCCB8B5A9716E1567F39A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	46747414d28db57aba08bcebc4654cd84394572b448933fbd0e852061897d40b.exe

C:\Users\Admin\AppData\Local\Temp\46747414d28db57aba08bcebc4654cd84394572b448933fbd0e852061897d40b.exe
"C:\Users\Admin\AppData\Local\Temp\46747414d28db57aba08bcebc4654cd84394572b448933fbd0e852061897d40b.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2696

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

update_20260814.log

Path C:\Users\Admin\AppData\Roaming\YaShangXgmf_lite\logs\misc\update_20260814.log
Size 1KB
SHA256 8072514e33f5ea29a6dd18daddce4ee0ab2096e10e16332a4fce1db68cf36182
MD5 af44da4825aa8946e3bb7230672bb99f
SHA1 12fee8fe6c576e480525a738d2144af3182ba8fb
SHA512 1815a6bba85e84dc6d1821e4f4a52ea413a92785c125ae4834bb76a9bf8ce95da366c32af16caf5d15b203a0850d89910da1a99a64a0f29ffb3c7b6cbb2c4f79
TLSH
T16211B10CA7CE4DF66DD064CD9271029C463328B971CC7358E8B0E426935BA02BA7E4ED
MD5 SHA1 SHA512 TLSH

Submit Download

memory/2696-0-0x0000000000E30000-0x00000000010B9000-memory.dmp

Download