5511b381fc05e43a32f61f8f544c5017652ae88b9b7ebfcdf9b5b7e2dc3d35b0

Analysis

max time kernel
60s
max time network
46s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/08/2026, 04:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
FirmaPeru-MBX65E.hta
Size 3KB
Sample260823-e7qqraej91
SHA256 5511b381fc05e43a32f61f8f544c5017652ae88b9b7ebfcdf9b5b7e2dc3d35b0
MD5 8c6c7cef39dc3c94faf7f00ee40c01b2
SHA1 87df843447be06fe65910088895295a0aaba223d
SHA512 147b5ecd070a807148de944cf32a80cdd3715b709bbfef22bd845bd12c620184e29774eb369000ee69f1f9b36a3b24f54085f2dbeb5106c82839a64b8dddfc50
TLSH
T15B5117F7BA8293C6BC31599F2A2F509D14941A431366D0F8E693DC01EF8DF4984783E8
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mshta.exe

C:\Windows\SysWOW64\mshta.exe
C:\Windows\SysWOW64\mshta.exe "C:\Users\Admin\AppData\Local\Temp\FirmaPeru-MBX65E.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}
1⤵
- System Location Discovery: System Language Discovery
PID:1284

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads