413d934900b554dc2d0bdf36ad3999e284c3e2b2c09d2a056fce5081de947076

Analysis

max time kernel
148s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
17/08/2026, 12:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
413d934900b554dc2d0bdf36ad3999e284c3e2b2c09d2a056fce5081de947076.exe
Size 1.2MB
Sample260817-p14zxabp4s
SHA256 413d934900b554dc2d0bdf36ad3999e284c3e2b2c09d2a056fce5081de947076
MD5 c381e48b1b31a19ab26a0f4dc3f7317c
SHA1 8eedd7c8e96cc3bebda9078165161aab669f76dc
SHA512 737816974bc9cb5ca4fbb8bf938135620b67f52a4b26686aac28f257c17c545a0a6b5ea9775a6e4258b9b1ec635b22ece61d3e7b6ed2c329707384b2b06a9d6c
SSDEEP 24576:xn5byIA6/fD0VHbaZ2Nrnc+U3EoRjbQy0211ERFDkCpTiPKFbDeLiKwOSrrMnfYd:5MIvfIVHbaZR3ECjbff1aDkaTvCTUrM2
TLSH
T1AA45330212D192B3D58A1D301F7EEBA1E6E5FC194290DE5B07987BF53E20E4FDA6E244
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 2 IoCs

pid	Process
1420	413d934900b554dc2d0bdf36ad3999e284c3e2b2c09d2a056fce5081de947076.exe
1420	413d934900b554dc2d0bdf36ad3999e284c3e2b2c09d2a056fce5081de947076.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	413d934900b554dc2d0bdf36ad3999e284c3e2b2c09d2a056fce5081de947076.exe

C:\Users\Admin\AppData\Local\Temp\413d934900b554dc2d0bdf36ad3999e284c3e2b2c09d2a056fce5081de947076.exe
"C:\Users\Admin\AppData\Local\Temp\413d934900b554dc2d0bdf36ad3999e284c3e2b2c09d2a056fce5081de947076.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:1420

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

LangDLL.dll

Path C:\Users\Admin\AppData\Local\Temp\nse1B50.tmp\LangDLL.dll
Size 5KB
SHA256 760df89c2341f9c39c0250c283cb9caad185244fd6b76e8157cdf49928dc1d8e
MD5 5e2fd68a1ce97cc2866becb699fdb4c0
SHA1 55469bdaea8e9660f69f15107affda81de2787ae
SHA512 de94531b4f0d85bfb8de5a30390631dca84064e48f1984b7521d54382ddd26e3d886738455a4ed7fcba3f7ee8b092cf01cadcb8c3326b9fa5721e6d952db871e
SSDEEP 48:S46+/DTKYKxbWsptIp5tCZ0iVEAWyMEv9v/ft2O2B8mW2ofjLl:zpuPbO5tCZBVEAWyMEFv2CmuL
TLSH
T14BC19370B3D248B9D591413778AB33D36612EE746784504FDB6315AA3820AE7AD3EBC2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nse1B50.tmp\System.dll
Size 12KB
SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
MD5 6d08f0d5503bb100b8429fefaad163a6
SHA1 2a79aac2d3b715326c3dcd3c5cf2e33de3632a0a
SHA512 e259b1aff39c533e3e31cf4eb323c8eb22b2beeb5d8ce2c929de30702a6d8ab8076aeacc983d724b05d7d99a6de8c4d239bd159642c7e75fb86faef683360a1f
SSDEEP 192:cjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZr0QPi:s/Qlt7wiij/lMRv/9V4brr
TLSH
T1A9427C1297B089F2F151093819667F2A6FBEAC5C23F405A3CFE304C63D212CB9879243
MD5 SHA1 SHA512 SSDEEP TLSH