ee7c1b141bee34a4b1d819ed48c84c859e8dd44bcae577b456f60e3fc359c80c

Analysis

max time kernel
298s
max time network
247s
platform
windows10-2004_x64
resource
win10v2004-20260513-es
resource tags

arch:x64arch:x86image:win10v2004-20260513-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
04/09/2026, 21:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Progisp v1.72/win-driver/libusb_0.1.12.1/libusb0.dll
Size 42KB
Sample260904-1ect3s1cnd
SHA256 ee7c1b141bee34a4b1d819ed48c84c859e8dd44bcae577b456f60e3fc359c80c
MD5 90745f9e96b5c661bb74b69407dd6ceb
SHA1 820f5bc61545d5eb38c973cb8878ebd4c1743adc
SHA512 586909f5aad4cd4cbdbdc669cb0f2bf0c4a5c74667ec09289eb95d3e80d91dc84dcc6cfb061167c28e977f72071f5dad1597a3133dacf821332d5734493dce53
SSDEEP 768:0HivL1/pHX8wcdfpizGlwycb6ajy2nZ6RBM601jV1:0M/tXelpirecD4BMt1jV
TLSH
T121131847B74B48F3E073913092CBF6BF8BB1D96485A1C62CDB944D6DD8AB8C9711E209
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 2956 wrote to memory of 776	2956	rundll32.exe	84

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Progisp v1.72\win-driver\libusb_0.1.12.1\libusb0.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2956
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Progisp v1.72\win-driver\libusb_0.1.12.1\libusb0.dll",#1
  2⤵
  - System Location Discovery: System Language Discovery
  PID:776

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads