9a7f7e738912c252ccbfb833cb75bc9b55123e770882d140c453e64a4137d2f4

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
31/08/2026, 10:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9a7f7e738912c252ccbfb833cb75bc9b55123e770882d140c453e64a4137d2f4.exe
Size 976KB
Sample260831-mtb97ssxbx
SHA256 9a7f7e738912c252ccbfb833cb75bc9b55123e770882d140c453e64a4137d2f4
MD5 ec2f0788571e77851cae8436b7d4e327
SHA1 69bb01c3dfbd2264a3517decb2d23b9645ba5ad4
SHA512 b810254d01367601e199566c75c9bf7d1a950c9356f28f2c2e70bd8fb5b3534cba0d86a6ec0589411cdce5c2e06d48ebbcdf2fa33510efc61283c03566e78720
SSDEEP 24576:czA0yV8lXLIV508vUay04sEA+/8dhihARombIi:czn/lcV508vUay04sJddhpIi
TLSH
T167253A543858F131DAB3227357BA1A78E08CB025A72A28F7D3C45BA89F189D13F3557B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	9a7f7e738912c252ccbfb833cb75bc9b55123e770882d140c453e64a4137d2f4.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5092	9a7f7e738912c252ccbfb833cb75bc9b55123e770882d140c453e64a4137d2f4.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
5092	9a7f7e738912c252ccbfb833cb75bc9b55123e770882d140c453e64a4137d2f4.exe

C:\Users\Admin\AppData\Local\Temp\9a7f7e738912c252ccbfb833cb75bc9b55123e770882d140c453e64a4137d2f4.exe
"C:\Users\Admin\AppData\Local\Temp\9a7f7e738912c252ccbfb833cb75bc9b55123e770882d140c453e64a4137d2f4.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:5092

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

launcher_config.ini

Path C:\Users\Admin\AppData\Local\Temp\launcher_config.ini
Size 348B
SHA256 938df7a6c7ebaa60cf0cd6de9299f550f61d6208601c8067eb4b0b7f975965c9
MD5 e3bed1ee0f3d384f4205e13e8d2c13a5
SHA1 32d5737458eae7fe3026ccc569376c6ca7d8b6ec
SHA512 d339595cc97aa92589b0813eacab7916687d45b2e422f1561676f89b0033050fbe508301e2000c68bfca4f73f9597608094467f389796b31e754e9b9f1e326d9
TLSH
T14BE02D800E002402E076E0A8E8B72BC1E0AAB00A88C15074FF3846DE1ABE43C02D8A07
MD5 SHA1 SHA512 TLSH

Submit Download