065914ce88e3ca8371aec4c27342df7bd1d7bf5f6063e3b7d8decd74b049412d

Analysis

max time kernel
148s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
31/08/2026, 10:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
065914ce88e3ca8371aec4c27342df7bd1d7bf5f6063e3b7d8decd74b049412d.exe
Size 976KB
Sample260831-mch2esfg97
SHA256 065914ce88e3ca8371aec4c27342df7bd1d7bf5f6063e3b7d8decd74b049412d
MD5 cecf13a94d579aafdbc3f1ed2e33755b
SHA1 be4940ecf16482abb8e87aad6b52bb32bd7ec441
SHA512 2443b446e010603cddee274eb78857af1b659111efd1a6cbdaf15102e61b03bef4f9576802f456891c9c719b75ff0497e1d79c3f2d2821fe83ca0930df60ba8d
SSDEEP 24576:YzA0yV8lXLIV508vUay04sEA+/8dhihARombYt:Yzn/lcV508vUay04sJddhpYt
TLSH
T182253A543858F131DAB3227357BA1A78E08CB025A72A28F7D3C45BA89F189D13F3557B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	065914ce88e3ca8371aec4c27342df7bd1d7bf5f6063e3b7d8decd74b049412d.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5844	065914ce88e3ca8371aec4c27342df7bd1d7bf5f6063e3b7d8decd74b049412d.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
5844	065914ce88e3ca8371aec4c27342df7bd1d7bf5f6063e3b7d8decd74b049412d.exe

C:\Users\Admin\AppData\Local\Temp\065914ce88e3ca8371aec4c27342df7bd1d7bf5f6063e3b7d8decd74b049412d.exe
"C:\Users\Admin\AppData\Local\Temp\065914ce88e3ca8371aec4c27342df7bd1d7bf5f6063e3b7d8decd74b049412d.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:5844

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

launcher_config.ini

Path C:\Users\Admin\AppData\Local\Temp\launcher_config.ini
Size 348B
SHA256 938df7a6c7ebaa60cf0cd6de9299f550f61d6208601c8067eb4b0b7f975965c9
MD5 e3bed1ee0f3d384f4205e13e8d2c13a5
SHA1 32d5737458eae7fe3026ccc569376c6ca7d8b6ec
SHA512 d339595cc97aa92589b0813eacab7916687d45b2e422f1561676f89b0033050fbe508301e2000c68bfca4f73f9597608094467f389796b31e754e9b9f1e326d9
TLSH
T14BE02D800E002402E076E0A8E8B72BC1E0AAB00A88C15074FF3846DE1ABE43C02D8A07
MD5 SHA1 SHA512 TLSH

Submit Download