374cf3f5b58b3cc7e7973bde90158c63bdb8587a0cdc14acde72df6967a0bee5

Analysis

max time kernel
150s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/08/2026, 10:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
374cf3f5b58b3cc7e7973bde90158c63bdb8587a0cdc14acde72df6967a0bee5.exe
Size 1.4MB
Sample260815-l6caasvsdv
SHA256 374cf3f5b58b3cc7e7973bde90158c63bdb8587a0cdc14acde72df6967a0bee5
MD5 cf6f464171d7d6d1bfa27e97a5be3461
SHA1 06892a895c2c77cc65e10f41796f3567df65fb4a
SHA512 209d4958ac6b39e5f3720ba30d4481431ba7507b9c0ab28275c1bef6535171a00bd2a9281d9eaa55477be353075cdb896caab73eed9fa033fbd14ed6283bcdf9
SSDEEP 24576:sNZtsRaVV2YFi7pC9J9DXDGbc9LseR8m6Z60SFa2Mzflk4BIBR:sN3sRiHi7pC3NXdRs88mK/zq
TLSH
T1136533577D19468DF1A841F094F35ACBADA9ACF82A052A63D2C5F14B67FF9316003EE0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	374cf3f5b58b3cc7e7973bde90158c63bdb8587a0cdc14acde72df6967a0bee5.exe

C:\Users\Admin\AppData\Local\Temp\374cf3f5b58b3cc7e7973bde90158c63bdb8587a0cdc14acde72df6967a0bee5.exe
"C:\Users\Admin\AppData\Local\Temp\374cf3f5b58b3cc7e7973bde90158c63bdb8587a0cdc14acde72df6967a0bee5.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1964

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1964-0-0x0000000000400000-0x0000000000D0B000-memory.dmp

Download