59efff7ca2cd1fdc3a6b48402045bb69c4d159ca8a3ca40bee99c3d0f90f5073

Analysis

max time kernel
0s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/08/2026, 04:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
تعريف فضي وهمي.exe
Size 93KB
Sample260822-flstnavzbw
SHA256 59efff7ca2cd1fdc3a6b48402045bb69c4d159ca8a3ca40bee99c3d0f90f5073
MD5 5b0105c2acc57c371cac8a2e15578814
SHA1 20b2956d8fbd41e090c0d9dda18c6c64dca26153
SHA512 71ea40bb57b5a27f91ea125aad999e137995859c8d6a1a28d27f0ca65c880d236e1f0b1c9f45d8bf65dedf5c2877d39a1ce65b8386ce77c55de9aa64c22c83b6
SSDEEP 1536:1U4FQWqkqqoLc2m+iIjEwzGi1dDpUDNgS:1U4mkqqoA2xi5i1dga
TLSH
T17B93E84977E56564E1BF56F79471F2004E34B48B1602E39D48F219AB0A33AC48F89FEB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	تعريف فضي وهمي.exe

C:\Users\Admin\AppData\Local\Temp\تعريف فضي وهمي.exe
"C:\Users\Admin\AppData\Local\Temp\تعريف فضي وهمي.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3816

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3816-1-0x0000000074A52000-0x0000000074A54000-memory.dmp

Download

memory/3816-0-0x0000000000E30000-0x0000000000E40000-memory.dmp