783e535a1c8f7bce2ef3f4e31affd5bd870b5392a6d17846b9d75369f8258bb7

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
21/08/2026, 12:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
783e535a1c8f7bce2ef3f4e31affd5bd870b5392a6d17846b9d75369f8258bb7.exe
Size 6.3MB
Sample260821-pdplpszbqa
SHA256 783e535a1c8f7bce2ef3f4e31affd5bd870b5392a6d17846b9d75369f8258bb7
MD5 e804d9b6795627147ff3d9196468aecb
SHA1 592940e75010775ff8a04b707bd656fb64725ae9
SHA512 abefa45bc3e215ecdbab91eb4046a5d6eacf2f87e119e009d385c505a116cd9c8df2300b9a9f60eac3cc63817d109a956693855d7b6d8d603ccc3441deac0dde
SSDEEP 98304:a8e9R8qAWLcnVwFdB5/2zZzRKJi7REQOog3lFgPFL24+QILVEe43krTEp+VguTR:a8sA9kXetzR9mBoKlOV203knm+Vr
TLSH
T1BC662321798080BADF62117149BCFB7A519FE5380B2152EF27DC25BE6F704C21A3796B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
5872	783e535a1c8f7bce2ef3f4e31affd5bd870b5392a6d17846b9d75369f8258bb7.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	783e535a1c8f7bce2ef3f4e31affd5bd870b5392a6d17846b9d75369f8258bb7.exe

C:\Users\Admin\AppData\Local\Temp\783e535a1c8f7bce2ef3f4e31affd5bd870b5392a6d17846b9d75369f8258bb7.exe
"C:\Users\Admin\AppData\Local\Temp\783e535a1c8f7bce2ef3f4e31affd5bd870b5392a6d17846b9d75369f8258bb7.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:5872

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

60AA68B4-B107-4182-B012-A69BB97049AD.tmp

Path C:\Users\Admin\AppData\Local\Temp\60AA68B4-B107-4182-B012-A69BB97049AD.tmp
Size 5.4MB
SHA256 4eda89920dd3cd1b3f48bd6fe361fc7a7121f7381cd90b7ef0d7b468b8350131
MD5 d17271632772b2f742d0cd0dd415e80e
SHA1 23027707a5d8e831615338ebbce70f9316774070
SHA512 fe59e5cdf5ecc6c984ee99fd9f2fa5b9fff0c50f26f899a02d6c2672e537301570f1f3c763c5c9cf2c548a99bf88bee1984ca3dc532620290a6014dee1952ac6
SSDEEP 98304:XZutA7koKUrTJM238xm6/a29F9vH0/olMtm43ivLSFnnRQQht/FzxN06n:E+7kox9M238xm6SoFBQoam0iWFRQQDJr
TLSH
T1B5463300B0419478D03F53B619AD9566A9AD3E6067A985F71BECB7F60D312C2CA33B1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download