8052cc81b113231eb2984c20f7ec371b1f9a7e9c25accb8d055fad07bfca24cf

Analysis

max time kernel
148s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/08/2026, 12:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
8052cc81b113231eb2984c20f7ec371b1f9a7e9c25accb8d055fad07bfca24cf.exe
Size 1.8MB
Sample260818-pca2xsha99
SHA256 8052cc81b113231eb2984c20f7ec371b1f9a7e9c25accb8d055fad07bfca24cf
MD5 d7212ab3e50e4018338698a3c479be17
SHA1 2e23df5f8bc1909ef761ddc48bf977768e4e6b24
SHA512 e2a609c62fdda993bf77cd4e4a0787c2eb05d7179ceb5df11b7784612bf63eafb2b9e4d20406e060fa0ba1676739285a11e6b3da5ffd4c0e33fb055728a95792
SSDEEP 24576:bZ0T2NWJfPYjcpcsJ12IYB5/0IlfElrCD8T7JhKspdCHBIZ140Q5XvoneNX:bZwtPIy2BrEl2ITdhKspdChEQ9
TLSH
T11795BE13B122C8B2F1442BF112B91778A9786B282974C997FBF0DC76BC71532C76661E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	8052cc81b113231eb2984c20f7ec371b1f9a7e9c25accb8d055fad07bfca24cf.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2108	8052cc81b113231eb2984c20f7ec371b1f9a7e9c25accb8d055fad07bfca24cf.exe
2108	8052cc81b113231eb2984c20f7ec371b1f9a7e9c25accb8d055fad07bfca24cf.exe

C:\Users\Admin\AppData\Local\Temp\8052cc81b113231eb2984c20f7ec371b1f9a7e9c25accb8d055fad07bfca24cf.exe
"C:\Users\Admin\AppData\Local\Temp\8052cc81b113231eb2984c20f7ec371b1f9a7e9c25accb8d055fad07bfca24cf.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2108

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2108-0-0x0000000010000000-0x000000001003C000-memory.dmp

Download

memory/2108-1-0x0000000010000000-0x000000001003C000-memory.dmp