1e7abd97964b883d43f1d66e7a9141648f41d1fba12bb1a46265bc8501ae2edd

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
31/08/2026, 02:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
v33377krk/AdvHD.exe
Size 1.9MB
Sample260831-c91mmateph
SHA256 1e7abd97964b883d43f1d66e7a9141648f41d1fba12bb1a46265bc8501ae2edd
MD5 9711bb37a8e8e160f7c965cc20e6b841
SHA1 5a0db20530e643395f9fe066f67bea7fa3b7cdd8
SHA512 4aec39f85fa7960f55c8f6429724015e16722ec00566c07287ca877eb49257818400554c72e6a9ed7d5162426d1fa6a2567f85f206d3ba2217af0158f664c550
SSDEEP 24576:2f//w8F0E/dRKPQbS2DHV+ae+As1GpKvITEKFsXmcrpdfzdgUV0S+j3EuKpvro2C:2fw8F0E/alN2XmcrpdfzdgUZ02E88
TLSH
T186956B12B547C075E98120F0556DBFBBE2785E3C1BB518C763C01EBA98709C36AB6F1A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	AdvHD.exe

C:\Users\Admin\AppData\Local\Temp\v33377krk\AdvHD.exe
"C:\Users\Admin\AppData\Local\Temp\v33377krk\AdvHD.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1548

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads