eed6436eeecb9fb3c57bd8d43afb74874575884204d50758ed1933a49e94e37a

Analysis

max time kernel
150s
max time network
135s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/08/2026, 03:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
eed6436eeecb9fb3c57bd8d43afb74874575884204d50758ed1933a49e94e37a.exe
Size 6.8MB
Sample260826-dzrgmsythw
SHA256 eed6436eeecb9fb3c57bd8d43afb74874575884204d50758ed1933a49e94e37a
MD5 7ca953cb72c7777ca278ff9bee2f46b0
SHA1 18e6c01e24458b52d22e030ca07fbad7e564b6a5
SHA512 a8a222bc8399c9fcddb757c9e7f6f0580a0f02ed94ba2838bbe40138744010fa8ef8e5a04ff97f9037fd16408a7ac22ad459cc8882a7d7fd661c6798047d71d5
SSDEEP 98304:RVcHPHa6RBsoJ6L6IacKyRNkll4lPCvqEYAosDB7wlMVYMx3+8eqpM1qu+wXpVPI:RVMsoJ6L6IFkll4sPDZpXxuRtqZ
TLSH
T1D97623117581D033DBE31072CEBDE77D85AD6AA40B2156DB63EC29BE5F209C26A3211F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
2796	eed6436eeecb9fb3c57bd8d43afb74874575884204d50758ed1933a49e94e37a.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	eed6436eeecb9fb3c57bd8d43afb74874575884204d50758ed1933a49e94e37a.exe

C:\Users\Admin\AppData\Local\Temp\eed6436eeecb9fb3c57bd8d43afb74874575884204d50758ed1933a49e94e37a.exe
"C:\Users\Admin\AppData\Local\Temp\eed6436eeecb9fb3c57bd8d43afb74874575884204d50758ed1933a49e94e37a.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:2796

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

universprod[1].txt

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\VFEXMF46\universprod[1].txt
Size 2B
SHA256 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
MD5 444bcb3a3fcf8389296c49467f27e1d6
SHA1 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
SHA512 9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570
MD5 SHA1 SHA512

Submit Download

9F79D193-D18F-4FC6-80B8-C423B1C3CCE6.tmp

Path C:\Users\Admin\AppData\Local\Temp\9F79D193-D18F-4FC6-80B8-C423B1C3CCE6.tmp
Size 7.1MB
SHA256 6fb4accab36eaa50b9365b40c6f31614047acc50a38484763abf2139623e6d0b
MD5 34cb25db229390f99895432a51afac80
SHA1 62115f5cb0cce86ab3dd42220bd0b43cf64e09a1
SHA512 cdd02c85070f380885c343b79e9d2f99f29636d27949f6423edaf27e942ff07848248e3a5abc3bc5c6232f7681572949a938285a32b96e7eed6565c7f3a60212
SSDEEP 196608:zOq78wwn3WM+7kox9M238xm6SoFBQoam0iWFRQQDJx1n:zWnGMMk2DsxPYLFiWFRFp
TLSH
T1427612217505C23BD9AA02F1593DBBAFAA6D6E78076404D7E3C41DBE5C704C3AB3261B
MD5 SHA1 SHA512 SSDEEP TLSH