7aaee9b3e21467db960be3a885ed03279d17d8bd9f3362551e20cf6991a3bce3

Analysis

max time kernel
150s
max time network
137s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/08/2026, 13:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
7aaee9b3e21467db960be3a885ed03279d17d8bd9f3362551e20cf6991a3bce3.exe
Size 6.8MB
Sample260826-qlaceszdlf
SHA256 7aaee9b3e21467db960be3a885ed03279d17d8bd9f3362551e20cf6991a3bce3
MD5 d15257f6897b272debb966e2ea59edc0
SHA1 660b3515fd1c33bffa3bf9775da9a6292e546a3d
SHA512 717c16a754a96ab6b13711ddbc8aae43452adc2f22562f2fdb80785ae7f95eb648be71d77757a039d6ec9d2f52751c95e5386ff91a5256a2af3c9a3888f7eaf1
SSDEEP 196608:l8MQDZI0CLxS74i/WyfXjiFpXZM7azIYhz:l8MQO0fMsffXjpUh
TLSH
T11E76231074419032EBF311B2CEBDE77D46ACA9A00B2656DF53EC167E5F71AC26A3211B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
3428	7aaee9b3e21467db960be3a885ed03279d17d8bd9f3362551e20cf6991a3bce3.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	7aaee9b3e21467db960be3a885ed03279d17d8bd9f3362551e20cf6991a3bce3.exe

C:\Users\Admin\AppData\Local\Temp\7aaee9b3e21467db960be3a885ed03279d17d8bd9f3362551e20cf6991a3bce3.exe
"C:\Users\Admin\AppData\Local\Temp\7aaee9b3e21467db960be3a885ed03279d17d8bd9f3362551e20cf6991a3bce3.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:3428

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

universprod[1].txt

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\HEUA9JR4\universprod[1].txt
Size 2B
SHA256 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
MD5 444bcb3a3fcf8389296c49467f27e1d6
SHA1 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
SHA512 9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570
MD5 SHA1 SHA512

Submit Download

33E52E52-A9D8-434A-A76D-97DC25767853.tmp

Path C:\Users\Admin\AppData\Local\Temp\33E52E52-A9D8-434A-A76D-97DC25767853.tmp
Size 7.1MB
SHA256 c36fec6944c342e2563e9c7045fa5ee12b93cb7967c66f55e6455bc793289855
MD5 802587b3e20803d3aa64c67916cf4683
SHA1 1c1cea19633fa0eb7b1b30f9c43b13faaacea493
SHA512 8a93ed4c6cf1715426bbe60ad51724a0462eaf6ca4b1a81fece43bd5a621a197f4fa731e7e9269b2cf201279a7be784a9195d707965b0cb0fb15d71145db4e25
SSDEEP 196608:j7MLQfYVvnh+7kox9M238xm6SoFBQoam0iWFRQQDJx1n:sV/hMk2DsxPYLFiWFRFp
TLSH
T1D97612217505C23AD5AA02F1593DBBAF9A2D6E7807B404D7E3C41DBE5D704C3AB3262B
MD5 SHA1 SHA512 SSDEEP TLSH