cd7760b18e17e6264339a3f279ce1866c8cb4aacdfcb9de53d31d80af97f6c9d

Analysis

max time kernel
148s
max time network
132s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/08/2026, 23:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
cd7760b18e17e6264339a3f279ce1866c8cb4aacdfcb9de53d31d80af97f6c9d.dll
Size 493KB
Sample260830-3wdh2ssbpc
SHA256 cd7760b18e17e6264339a3f279ce1866c8cb4aacdfcb9de53d31d80af97f6c9d
MD5 72a61c3bdee9e9f6e7424e9d75f27a0e
SHA1 f004a74b4dd93efd1d6a2cb4b4c53c54e2c1419f
SHA512 20620ed857a21699aac4e334519fabc4c013fa9a9bc5eca2e28af6d7b67f6ddb937695bb32114166c8a5a1c6205bafa7cf4d9495459449292fb2f0321f097e07
SSDEEP 6144:4YhQ/pgCoR5EdShtJzqNg1lAkdAHwLhrz6sn:4yEkVIg0k2HwdrOsn
TLSH
T1D0B4E740B2E06CA3EA67C33948E7E2212B387B516357DF17D6085D2C1A7B7D32E91E46
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 2748 wrote to memory of 4728	2748	regsvr32.exe	89

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\cd7760b18e17e6264339a3f279ce1866c8cb4aacdfcb9de53d31d80af97f6c9d.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:2748
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\cd7760b18e17e6264339a3f279ce1866c8cb4aacdfcb9de53d31d80af97f6c9d.dll
  2⤵
  - System Location Discovery: System Language Discovery
  PID:4728

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads