f574bb12afb6696c0cbb09b61d75cae1fb48843079e07cde53886be61ce5bd2d

Analysis

max time kernel
148s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/08/2026, 17:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
f574bb12afb6696c0cbb09b61d75cae1fb48843079e07cde53886be61ce5bd2d.exe
Size 483KB
Sample260820-vt1a2avwhy
SHA256 f574bb12afb6696c0cbb09b61d75cae1fb48843079e07cde53886be61ce5bd2d
MD5 e74610e567ddf8705affe3691f693f1b
SHA1 b9b1b50a229ca787d45d4f1fd96d4a1b3b37879e
SHA512 eb4229fe52ca642c3003943faa244260e9a135fc478ae4750458713114e8629e18f3c5e2f27a0a8bf6e77f5e355f76e4efcb0ee722117d0d363d77e560e445c5
SSDEEP 6144:AXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHFsAOZZsAX4cNu5Gv:AX7tPMK8ctGe4Dzl4h2QnuPs/ZsPcv
TLSH
T1C9B49E01BAD1C072D57514300D3AF776EAB8BD2028364A7B73D61D5BFE31190B62AAB7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	f574bb12afb6696c0cbb09b61d75cae1fb48843079e07cde53886be61ce5bd2d.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5668	f574bb12afb6696c0cbb09b61d75cae1fb48843079e07cde53886be61ce5bd2d.exe

C:\Users\Admin\AppData\Local\Temp\f574bb12afb6696c0cbb09b61d75cae1fb48843079e07cde53886be61ce5bd2d.exe
"C:\Users\Admin\AppData\Local\Temp\f574bb12afb6696c0cbb09b61d75cae1fb48843079e07cde53886be61ce5bd2d.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:5668

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

logs.dat

Path C:\ProgramData\remcos\logs.dat
Size 144B
SHA256 a43c7c819e5b4ae31c096a824cdd6d5dd94002d9e8f02e14d984a7d26af0cdb9
MD5 f3de0ca10928fb3724890ef4bb6f17d0
SHA1 ed999e72249127b885b810685cc82c7b7d71fddf
SHA512 944b759cac4ccba712354fba8ca06bf91f4b3ddaf654899c11b4db45a37f999f0f7dbeac10c51f94c4b63bb91aeec53f57a8f4ee019f541dd560ca10b2421b70
TLSH
T107C04C5577E110197872E29795B600263A61BD550038840D11D1034C05F69051184797
MD5 SHA1 SHA512 TLSH

Submit Download