9f24b94c051984202eb7081d93ebcaba797ea625324568ea415f5f992a74bdb8

Analysis

max time kernel
148s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
31/08/2026, 02:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9f24b94c051984202eb7081d93ebcaba797ea625324568ea415f5f992a74bdb8.exe
Size 256KB
Sample260831-c9fbpacn7x
SHA256 9f24b94c051984202eb7081d93ebcaba797ea625324568ea415f5f992a74bdb8
MD5 00a1a0647e7e48f7b66bd574494a1e19
SHA1 dfa59c08dd079c4345dc6afd900a0ccb844c01e4
SHA512 758aa5592a85e2d1b72c1ff66e86631b904f776c3b3e491b0337330f63a9976feb20607665ffc06f9babfa9e27ff822ed19627306691de269c7e63dfae5a7270
SSDEEP 3072:ZAyL9W0ElYKXeMrTftffjmNAar1Pg9uCRFRzsxeuPo10JOSdBkK:PL5EjOMPVfjmNAUPmRFJs0ug1MOc5
TLSH
T103448D22BAE0C432D4A255B89DACD2669A3E7A310F398CD3769C0FDD9F613C1563C356
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	9f24b94c051984202eb7081d93ebcaba797ea625324568ea415f5f992a74bdb8.exe

C:\Users\Admin\AppData\Local\Temp\9f24b94c051984202eb7081d93ebcaba797ea625324568ea415f5f992a74bdb8.exe
"C:\Users\Admin\AppData\Local\Temp\9f24b94c051984202eb7081d93ebcaba797ea625324568ea415f5f992a74bdb8.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4148

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4148-0-0x0000000000400000-0x0000000000435000-memory.dmp

Download

memory/4148-1-0x0000000000400000-0x0000000000435000-memory.dmp