fa094f328f16199a545ccd7480851f00e2f9292f9165b27733f803dcb46b6cf1

Analysis

max time kernel
150s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/08/2026, 14:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
fa094f328f16199a545ccd7480851f00e2f9292f9165b27733f803dcb46b6cf1.exe
Size 1.2MB
Sample260815-ry481ayxfx
SHA256 fa094f328f16199a545ccd7480851f00e2f9292f9165b27733f803dcb46b6cf1
MD5 19ecdcb840d1934c873c422c54453cbe
SHA1 193270d3b8acdfcbd877be3a6e7c10aa2fb4b92a
SHA512 3c2d47a0ae52f0af2be4f70c4ec7ed4811569a1c7e273169e1865e393e748dcb8ee8682d46b055a8d8e486c7e46923c398c5a8e9d3e0800c95815faa7f045d94
SSDEEP 24576:5kl5o0JJwyNTYYehR7yTZ7qkCjC95X/tl0M/Xui79oilbIJeF9:SzJJ5E7yTZ7qkCjCDsM/v92eL
TLSH
T1F9556D29EA4611F8D91787F0899FE7BB8B147A348036DD6FFF8DCA04B4335123859266
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	fa094f328f16199a545ccd7480851f00e2f9292f9165b27733f803dcb46b6cf1.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
6060	fa094f328f16199a545ccd7480851f00e2f9292f9165b27733f803dcb46b6cf1.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
6060	fa094f328f16199a545ccd7480851f00e2f9292f9165b27733f803dcb46b6cf1.exe

C:\Users\Admin\AppData\Local\Temp\fa094f328f16199a545ccd7480851f00e2f9292f9165b27733f803dcb46b6cf1.exe
"C:\Users\Admin\AppData\Local\Temp\fa094f328f16199a545ccd7480851f00e2f9292f9165b27733f803dcb46b6cf1.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:6060

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

launcher_config.ini

Path C:\Users\Admin\AppData\Local\Temp\launcher_config.ini
Size 348B
SHA256 03a0b173f2f83b54725636c0c2606360d3e5593f51bcd8d1cec393a9ce70be51
MD5 610c369630999a1301cd52c6ae849c10
SHA1 ac40ab29c31b0d5c66be2621e6ed5d1b8d61c449
SHA512 45d4678f97e8ea62276e6180cf482c462d364a0a46273337c92ed4633dc8286e2a0e6b5f72dafbeb46832dcd828eae530eda2825cf23dfe385f936455254b910
TLSH
T17CE02D800E002842E076E4ACE8A71BC0E0AAB00F88C15074FF2846DE1ABD43D22D8A03
MD5 SHA1 SHA512 TLSH

Submit Download

memory/6060-35-0x0000000000830000-0x000000000096F000-memory.dmp

Download