386c1ec4afb870ce4bce335215b81635b3db52f52f3c5b22c44d4cb4574bc5fa

Analysis

max time kernel
148s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/08/2026, 12:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
386c1ec4afb870ce4bce335215b81635b3db52f52f3c5b22c44d4cb4574bc5fa.exe
Size 544KB
Sample260825-prdrcsywey
SHA256 386c1ec4afb870ce4bce335215b81635b3db52f52f3c5b22c44d4cb4574bc5fa
MD5 b24b969c43187a8c8b0f1696749ee31c
SHA1 4018bfe68f42e419af7a885253555ee985a0ce1b
SHA512 3cce3c9b650ba1232bf9983cbe394d9a2cb81c649708bd5e5d0a3ce318134f6b8e4848433ff45fd81458da585c36b27b9d77313ecc34cb21de7cec5e8be0c052
SSDEEP 12288:zpCAEy9t/hjPWirR1wGlbBeIhEoZb8v9ttA7zJ:zpFEy9t/hT/AGEomVtG7
TLSH
T194C4392365A9BCB2C47102B05B77DBE4972DEC208B71D5CB63C01D6AA9BC1C2773179A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	386c1ec4afb870ce4bce335215b81635b3db52f52f3c5b22c44d4cb4574bc5fa.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4956	386c1ec4afb870ce4bce335215b81635b3db52f52f3c5b22c44d4cb4574bc5fa.exe
4956	386c1ec4afb870ce4bce335215b81635b3db52f52f3c5b22c44d4cb4574bc5fa.exe

C:\Users\Admin\AppData\Local\Temp\386c1ec4afb870ce4bce335215b81635b3db52f52f3c5b22c44d4cb4574bc5fa.exe
"C:\Users\Admin\AppData\Local\Temp\386c1ec4afb870ce4bce335215b81635b3db52f52f3c5b22c44d4cb4574bc5fa.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:4956

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads