09cc986e88563dd65f83cdab115e8e4ead855126817f8b3ae3dbc30ef6fce068

Analysis

max time kernel
9s
max time network
136s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
31/08/2026, 10:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
09cc986e88563dd65f83cdab115e8e4ead855126817f8b3ae3dbc30ef6fce068.exe
Size 3.8MB
Sample260831-mk49masvhs
SHA256 09cc986e88563dd65f83cdab115e8e4ead855126817f8b3ae3dbc30ef6fce068
MD5 6faf867491d8a224c27da10b16758de1
SHA1 37ad0ee6a2d6aa35d7d15983ff9db15d5ed1935c
SHA512 08e576cd8b6b7de747586e835b8cf84bdf3e6c855d7d9acf7ebe84c9093469f2e71ce715911383dfe7978312cf78bd16421a8ad09ddfc7129159047036d7e3d6
SSDEEP 98304:1/+aiCwExNoMegJCMICcBmgYQjnOXuaEk:1/+VELMNOXua
TLSH
T12E06AF317582E076E97202B18569FB79B2FD79701B2585C353C47A342A306F21D3BAAF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	09cc986e88563dd65f83cdab115e8e4ead855126817f8b3ae3dbc30ef6fce068.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2636	09cc986e88563dd65f83cdab115e8e4ead855126817f8b3ae3dbc30ef6fce068.exe
2636	09cc986e88563dd65f83cdab115e8e4ead855126817f8b3ae3dbc30ef6fce068.exe
2636	09cc986e88563dd65f83cdab115e8e4ead855126817f8b3ae3dbc30ef6fce068.exe
2636	09cc986e88563dd65f83cdab115e8e4ead855126817f8b3ae3dbc30ef6fce068.exe

C:\Users\Admin\AppData\Local\Temp\09cc986e88563dd65f83cdab115e8e4ead855126817f8b3ae3dbc30ef6fce068.exe
"C:\Users\Admin\AppData\Local\Temp\09cc986e88563dd65f83cdab115e8e4ead855126817f8b3ae3dbc30ef6fce068.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2636

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads