9482499fa689905b95e4877833378bf2b56b8e960247ee7e2c008ecaac649774

Analysis

max time kernel
150s
max time network
140s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
21/08/2026, 12:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9482499fa689905b95e4877833378bf2b56b8e960247ee7e2c008ecaac649774.exe
Size 6.8MB
Sample260821-p7fkwseq4x
SHA256 9482499fa689905b95e4877833378bf2b56b8e960247ee7e2c008ecaac649774
MD5 be2afe96496664f93d0d13b8243a3e0f
SHA1 32aa52b1c0d9609d54e52682fd0d01d2038ad035
SHA512 2d2d48f27eb762db7b1296d5d98cbeb9cbdea8d040b9f757533f15804e666171da5440efb2eafbcf55a1ad798fbee03d7ebdef3b62dbbee769fe2524fb6589a4
SSDEEP 196608:3oWqIyIFHvCEA9mImhOkRvAB3Y4/BTYd+3:XqrEHKEmmImhDRvARyd
TLSH
T12C7623213982C076DBA21271497CF77A46DEA5380F2106EF2BD8263E5F705D34E3666B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
4180	9482499fa689905b95e4877833378bf2b56b8e960247ee7e2c008ecaac649774.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	9482499fa689905b95e4877833378bf2b56b8e960247ee7e2c008ecaac649774.exe

C:\Users\Admin\AppData\Local\Temp\9482499fa689905b95e4877833378bf2b56b8e960247ee7e2c008ecaac649774.exe
"C:\Users\Admin\AppData\Local\Temp\9482499fa689905b95e4877833378bf2b56b8e960247ee7e2c008ecaac649774.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:4180

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

6832C6CE-837C-44B0-B476-8B32A0F75438.tmp

Path C:\Users\Admin\AppData\Local\Temp\6832C6CE-837C-44B0-B476-8B32A0F75438.tmp
Size 7.1MB
SHA256 7b5e57ed60d9fc71bc2c8cd366275a00eb4270ca8cc116d966a9f86144f82355
MD5 1c18fd9f0f2ff7995fb55bac7bba9e5b
SHA1 56fbf33628df93fca5826b5d3c7286d786790a79
SHA512 f62b2d9a6f3a68082e30d0099a40526fc32e6aedce20cfdd54e7345212724745d55fb166f4e37c1b7e7f8c5a4ccbe3ad44a0101e5fa6c71cb38ed45007e88494
SSDEEP 196608:cOq78wwn3W6+7kox9M238xm6SoFBQoam0iWFRQQDJx1n:cWnG6Mk2DsxPYLFiWFRFp
TLSH
T14C7612217505C23BD9AA02F1593DBBAFAA6D6E78076404D7E3C41DBE5C704C3AB3261B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download