7b76e06652297c1ffd3b081bb394096cd2e302036ac2517344a2fc05ed52b90d

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/08/2026, 08:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
7b76e06652297c1ffd3b081bb394096cd2e302036ac2517344a2fc05ed52b90d.exe
Size 1.1MB
Sample260824-krdddavdma
SHA256 7b76e06652297c1ffd3b081bb394096cd2e302036ac2517344a2fc05ed52b90d
MD5 5b72c19d826c5a955455b43c9c980e2e
SHA1 0bdea2ec8df5866ffadf78502d01b44bd7ac3047
SHA512 9848b9f512669b55561becc93948c590a0e559b8ca969258c67a4616f9579ecd37ce822748d58d9bc7867d5a9252dfe752ffb3acce96bf882e19a056b2e6a8c7
SSDEEP 24576:PQLSJc3YZHVrIm/RL+bLsYwoxNLwXeqeNu8:5BFXRLIwofUe
TLSH
T131458D07B18180F1C148293144E65739EE74DE960E25CFDBA768FEAC1D32AD1AF3619E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	7b76e06652297c1ffd3b081bb394096cd2e302036ac2517344a2fc05ed52b90d.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
5000	7b76e06652297c1ffd3b081bb394096cd2e302036ac2517344a2fc05ed52b90d.exe
5000	7b76e06652297c1ffd3b081bb394096cd2e302036ac2517344a2fc05ed52b90d.exe

C:\Users\Admin\AppData\Local\Temp\7b76e06652297c1ffd3b081bb394096cd2e302036ac2517344a2fc05ed52b90d.exe
"C:\Users\Admin\AppData\Local\Temp\7b76e06652297c1ffd3b081bb394096cd2e302036ac2517344a2fc05ed52b90d.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:5000

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads