84185b8b4b12c4362650b9b99905745a00105aeb1b1d5346fc6948d288650cbc

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
31/08/2026, 03:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
84185b8b4b12c4362650b9b99905745a00105aeb1b1d5346fc6948d288650cbc.exe
Size 203KB
Sample260831-ejx5xsvaqa
SHA256 84185b8b4b12c4362650b9b99905745a00105aeb1b1d5346fc6948d288650cbc
MD5 7808ea9203f34c6be9c452339dc37a4e
SHA1 931fa45f2a82866c6071fcaaaaf6f6ad28d92851
SHA512 587d06299017d6208967dc664903edc84d19081100ac10410f3d6094d6fbc00e4212607b634f1e0c3dd0dae6d617643a359d9861646ef782886e9a2264cb35ed
SSDEEP 3072:tAyL9W0ElYKXGMlftffjmNoxIFV/a9+Gb:TL5Ej2MlVfjmN5jI9
TLSH
T1F714AD09F7E09D76D13D5EB85EA5C11AA53AB7210E2A846F3CDF1E9D4F6A3C0062C352
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	84185b8b4b12c4362650b9b99905745a00105aeb1b1d5346fc6948d288650cbc.exe

C:\Users\Admin\AppData\Local\Temp\84185b8b4b12c4362650b9b99905745a00105aeb1b1d5346fc6948d288650cbc.exe
"C:\Users\Admin\AppData\Local\Temp\84185b8b4b12c4362650b9b99905745a00105aeb1b1d5346fc6948d288650cbc.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4384

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4384-0-0x0000000000400000-0x0000000000435000-memory.dmp

Download

memory/4384-1-0x0000000000400000-0x0000000000435000-memory.dmp