573c7b5f5ab6fd1b8b7832a689d249035c74a059347af2bff8e781d2d5242944

Analysis

max time kernel
150s
max time network
130s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/08/2026, 18:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
573c7b5f5ab6fd1b8b7832a689d249035c74a059347af2bff8e781d2d5242944.exe
Size 927KB
Sample260825-xk562aae85
SHA256 573c7b5f5ab6fd1b8b7832a689d249035c74a059347af2bff8e781d2d5242944
MD5 2504dce69eb3700369a514320611bf93
SHA1 fc11a6d1c6a5ec7316537408417afbc7d32d9631
SHA512 2cc3af7f0ff81829c1690dffac5c2efbfb7cb17db044786e660aad6032490009732eea6dd81a0ee5e5268efba196c2096c4eb2c30eddc865a006d5ca2bd27967
SSDEEP 6144:KLveAAzizR1BYSq6ix4mqUUfykBIKi8ezuEJYK80k8vBIJKftg2p7fz0h:KSXSqAkiZbezbr3k8vB5j4
TLSH
T150150DD0A7FD9657F6F36B74ADB582B50D3A7CA3A835CB0E5210645E0931A80DDB0B23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	573c7b5f5ab6fd1b8b7832a689d249035c74a059347af2bff8e781d2d5242944.exe

C:\Users\Admin\AppData\Local\Temp\573c7b5f5ab6fd1b8b7832a689d249035c74a059347af2bff8e781d2d5242944.exe
"C:\Users\Admin\AppData\Local\Temp\573c7b5f5ab6fd1b8b7832a689d249035c74a059347af2bff8e781d2d5242944.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1300

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1300-0-0x0000000000432000-0x0000000000433000-memory.dmp

Download

memory/1300-1-0x0000000000400000-0x00000000004D1000-memory.dmp