f33b61ea4a1d4d33675a2a23c460357e87d281c39593fdf490c07b974dcbbe1e

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
31/08/2026, 01:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
f33b61ea4a1d4d33675a2a23c460357e87d281c39593fdf490c07b974dcbbe1e.exe
Size 262KB
Sample260831-bttnpsck21
SHA256 f33b61ea4a1d4d33675a2a23c460357e87d281c39593fdf490c07b974dcbbe1e
MD5 01dc22149b7448e8e0438e31d94fea1e
SHA1 fd0fbbfd5fbdd22f8622769dcfe5c57b9a345cba
SHA512 1079ed663dae47cdcbfeaaa7420c6c29711ce4fcfbdad0196dab53d8458bc8e7a8714ef6b73e2226ce1fa162d10e54c4d09807a45fe1f378df4dac05ff788046
SSDEEP 3072:ZAyL9W0ElYKXeMaftffjmNAFQ2xgs35efEOD8KxLQgSdJO3Wn:PL5EjOMaVfjmNAPNV43Wn
TLSH
T10D444942ABE898B9F0B34A74AD798156A531BE240F12D4EFB05D574D4F72BC08E79323
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	f33b61ea4a1d4d33675a2a23c460357e87d281c39593fdf490c07b974dcbbe1e.exe

C:\Users\Admin\AppData\Local\Temp\f33b61ea4a1d4d33675a2a23c460357e87d281c39593fdf490c07b974dcbbe1e.exe
"C:\Users\Admin\AppData\Local\Temp\f33b61ea4a1d4d33675a2a23c460357e87d281c39593fdf490c07b974dcbbe1e.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4344

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4344-0-0x0000000000400000-0x0000000000435000-memory.dmp

Download

memory/4344-1-0x0000000000400000-0x0000000000435000-memory.dmp