78d709644085943c538331ef77dffe161a5aae329354fba3085bdf10dd115088

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
31/08/2026, 07:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
78d709644085943c538331ef77dffe161a5aae329354fba3085bdf10dd115088.exe
Size 1.0MB
Sample260831-h46vcaxblb
SHA256 78d709644085943c538331ef77dffe161a5aae329354fba3085bdf10dd115088
MD5 f1bbc8d060f21f1c68c3dd0b643454d3
SHA1 d30bb55d7343dfefa838ce71df83c887a6f3dd7c
SHA512 010527edb3731a1adb05b8dea9b8547b742eff4913fed87a76532f9dd3c30c7b1fafc7920dcf1ed036dcd1e38e13d23f80019c4f04b631efcb1dfc4b93f77c5d
SSDEEP 24576:xR6UQPsGhqwNw9/9/MuiVC4YJclC5fq3IjGbiONp:xR6UzGAwNw9/9/MuifYJNLjGbi+p
TLSH
T1B9354B227A854333E2B32572C99EE3F5426D6030533761C763C855AC27A4DE3AB772DA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	78d709644085943c538331ef77dffe161a5aae329354fba3085bdf10dd115088.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5000	78d709644085943c538331ef77dffe161a5aae329354fba3085bdf10dd115088.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
5000	78d709644085943c538331ef77dffe161a5aae329354fba3085bdf10dd115088.exe

C:\Users\Admin\AppData\Local\Temp\78d709644085943c538331ef77dffe161a5aae329354fba3085bdf10dd115088.exe
"C:\Users\Admin\AppData\Local\Temp\78d709644085943c538331ef77dffe161a5aae329354fba3085bdf10dd115088.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:5000

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

launcher_config.ini

Path C:\Users\Admin\AppData\Local\Temp\launcher_config.ini
Size 348B
SHA256 938df7a6c7ebaa60cf0cd6de9299f550f61d6208601c8067eb4b0b7f975965c9
MD5 e3bed1ee0f3d384f4205e13e8d2c13a5
SHA1 32d5737458eae7fe3026ccc569376c6ca7d8b6ec
SHA512 d339595cc97aa92589b0813eacab7916687d45b2e422f1561676f89b0033050fbe508301e2000c68bfca4f73f9597608094467f389796b31e754e9b9f1e326d9
TLSH
T14BE02D800E002402E076E0A8E8B72BC1E0AAB00A88C15074FF3846DE1ABE43C02D8A07
MD5 SHA1 SHA512 TLSH

Submit Download