84cd6fcfce019b95ea85b08b309fb36d6638e1a67a75a4d08f08739105ce5445

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/09/2026, 22:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-09-01_04e909afdbb8dd2e8d7ad81b4871f5a7_akira_elex.exe
Size 6.1MB
Sample260901-1675asycja
SHA256 84cd6fcfce019b95ea85b08b309fb36d6638e1a67a75a4d08f08739105ce5445
MD5 04e909afdbb8dd2e8d7ad81b4871f5a7
SHA1 58628393a9e84f5a3ca9004666cbbea46cd2c9b7
SHA512 f96ff7a76d99d4f068c95bdd503e31dbe1fa24b28854c17e049fc191810be31311fde16e2bb12812b441c3d0e8371b41e03e2f78006261e05158bd4d92cea9c3
SSDEEP 98304:XpDMNIG1WKNS3lgrC9uiUnoGqF4VEZ/5KtY9qOWBmQJ0PD6aBL:XpDMxWb3arC9VMo/Z/WY9qOWB3J05N
TLSH
T14E569D52A5D37ABDE2C3713014BA6227FEF9062847048FF6E342CD6C2576BB52D7418A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
1340	a.exe

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	a.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-09-01_04e909afdbb8dd2e8d7ad81b4871f5a7_akira_elex.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-01_04e909afdbb8dd2e8d7ad81b4871f5a7_akira_elex.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-01_04e909afdbb8dd2e8d7ad81b4871f5a7_akira_elex.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1236

C:\ProgramData\DiagTrack\be64337e8ff86140\a.exe
C:\ProgramData\DiagTrack\be64337e8ff86140\a.exe
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:1340

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

a.exe

Path C:\ProgramData\DiagTrack\be64337e8ff86140\a.exe
Size 100.0MB
SHA256 7f1774f49cab1bc1fb7caaebcb3344775a188750fb27ce85acf6f7a4df0c94a4
MD5 2c3fab7d06aadfb140ad4df2b358d459
SHA1 73c975d0f25480ad56b5cf2fdeb6bad26ea9166a
SHA512 906b92a0cbc80288de70cddc6cc24768943f642fb65eb266dcb28118acc7072fc2638d265787d9c1d78e6a28121102a6da854ebf47587eb0cf033e1836a46dbe
SSDEEP 1572864:T/LApZUjfygPethwf0p6qDJaNUb4axTJNEtocvtTO0BrVzpygxi8kx/mAq+ksLS9:T271LwfLdUbXStZJOYLygx+O+kESBZcW
TLSH
T1B2383393A5D37EB9E2C3613004BA722AFEB9062447048FF6D342CC6C15BAEF56D7454A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1340-1505-0x0000000000DC0000-0x0000000000DC4000-memory.dmp

Download