02a6ad10cc66ff7ee3cf1d0a3a47f0a7cdcaeb9a7ea70f30e6c5da63744b4c03

Analysis

max time kernel
148s
max time network
147s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/08/2026, 12:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
02a6ad10cc66ff7ee3cf1d0a3a47f0a7cdcaeb9a7ea70f30e6c5da63744b4c03.exe
Size 6.8MB
Sample260824-phx4mstsdx
SHA256 02a6ad10cc66ff7ee3cf1d0a3a47f0a7cdcaeb9a7ea70f30e6c5da63744b4c03
MD5 727d43d334974e4bb57f52b016dadb8c
SHA1 b80194694d467f5391a1e23b3ff1e552f228e70a
SHA512 215992bb6c1b02589a326ebe96ab367fb4de490ec2cf30839b695ed484d85e6dbd5735f2fc1397c737a55aacea12002290939e9ae9b391b93884ced19a27ee0e
SSDEEP 196608:kf/0/Nr99cL0mbNXPK/GPS6jxuXDk2CS/:+/0/NB9U0ONXPK/NnDk2V/
TLSH
T1477623113981C037DBB321B24ABCEA6E959DE9600F2161DB67DC19BE5F608C26B3251F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
1188	02a6ad10cc66ff7ee3cf1d0a3a47f0a7cdcaeb9a7ea70f30e6c5da63744b4c03.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	02a6ad10cc66ff7ee3cf1d0a3a47f0a7cdcaeb9a7ea70f30e6c5da63744b4c03.exe

C:\Users\Admin\AppData\Local\Temp\02a6ad10cc66ff7ee3cf1d0a3a47f0a7cdcaeb9a7ea70f30e6c5da63744b4c03.exe
"C:\Users\Admin\AppData\Local\Temp\02a6ad10cc66ff7ee3cf1d0a3a47f0a7cdcaeb9a7ea70f30e6c5da63744b4c03.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:1188

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

universprod[1].txt

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\VFEXMF46\universprod[1].txt
Size 2B
SHA256 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
MD5 444bcb3a3fcf8389296c49467f27e1d6
SHA1 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
SHA512 9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570
MD5 SHA1 SHA512

Submit Download

298F49AE-0E7D-4FAA-A306-C06ADE722989.tmp

Path C:\Users\Admin\AppData\Local\Temp\298F49AE-0E7D-4FAA-A306-C06ADE722989.tmp
Size 7.1MB
SHA256 75b91c3807f7ef01c663f23abe8a01e94f660036d1dba7683f2747f213fdc8e4
MD5 8295d8b9ff946cf0c18d5f4d1ed24e66
SHA1 90cccdd4efd0b35fcd078bc1e5e1a5c58f381ba3
SHA512 d52b0fd2135ad36aa982b5adaddc8a7933b4945c2cc624b1f5d9fa24be274350db28663f5f678e4a2760584ab882b17eaa7e5725da742ff50dbfba49f103f74c
SSDEEP 196608:iOq78wwn3WN+7kox9M238xm6SoFBQoam0iWFRQQDJx1n:iWnGNMk2DsxPYLFiWFRFp
TLSH
T1657612217505C23BD9AA02F1593DBBAFAA6D6E78076404D7E3C41DBE5C704C3AB3261B
MD5 SHA1 SHA512 SSDEEP TLSH