6c6c1469789f0ae21de56a3af8a51a91928bf04681e6edf5a13b950b30e0fef4

Analysis

max time kernel
148s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/08/2026, 09:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
6c6c1469789f0ae21de56a3af8a51a91928bf04681e6edf5a13b950b30e0fef4.exe
Size 215KB
Sample260815-k9df4atajd
SHA256 6c6c1469789f0ae21de56a3af8a51a91928bf04681e6edf5a13b950b30e0fef4
MD5 41355dc210c047ffcfac60e660dacc2b
SHA1 9ad58e54f05688f519d1c96d963e92b25a19f0df
SHA512 2dc359cf40e56b960031a456e48a1c4e81172b3b16741dd4090aef9dfe01d5ae3db2f6eefe59b727317f74edc2338a8a9e50cc4ed8a11537c5bbb812079c8723
SSDEEP 3072:8tQMFVo8i3m7sO+1s96jakCf+g794ncQouM:8tQMs8vCs96jXCf+q6q
TLSH
T11C245B9BBBC69E57E91103798CEAA314173EE6F417478F872E3588381613B91BEC5209
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	6c6c1469789f0ae21de56a3af8a51a91928bf04681e6edf5a13b950b30e0fef4.exe

C:\Users\Admin\AppData\Local\Temp\6c6c1469789f0ae21de56a3af8a51a91928bf04681e6edf5a13b950b30e0fef4.exe
"C:\Users\Admin\AppData\Local\Temp\6c6c1469789f0ae21de56a3af8a51a91928bf04681e6edf5a13b950b30e0fef4.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4560

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4560-0-0x0000000000400000-0x0000000000436000-memory.dmp

Download