2c636bd447149f8978fb640f91594c7fe5d98b48c0994a7673fb1038b2510c09

Analysis

max time kernel
148s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/09/2026, 16:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2c636bd447149f8978fb640f91594c7fe5d98b48c0994a7673fb1038b2510c09.exe
Size 92KB
Sample260907-tre2mscp2y
SHA256 2c636bd447149f8978fb640f91594c7fe5d98b48c0994a7673fb1038b2510c09
MD5 a80c610a60b28422d72e9f496586c5a4
SHA1 3fd876e51de415f10ea98469ab85f1d8741db8a3
SHA512 a49b01a4c9fa6c5c69bbce6b285d857479b2d9ffe62a12ee26d3e4165f62c6ec886bd07955571ee59666fadabb91c225e73d983b609d9b309e1763de17863a52
SSDEEP 1536:iKYN7p9ZTJ9An4SOLdzdRdWkmE8edawl4tb7qaBTm8DD9835umKyR7rgwrBQ8Tip:s7p9ZgZkdzdRdWkmE8edaP7qaBTm8DDH
TLSH
T1CF93D751B5E2FB1FD5AB8B3138EA9205F4722522773B91CB111C1A344AF67C0A63D71A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2c636bd447149f8978fb640f91594c7fe5d98b48c0994a7673fb1038b2510c09.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2820	2c636bd447149f8978fb640f91594c7fe5d98b48c0994a7673fb1038b2510c09.exe
2820	2c636bd447149f8978fb640f91594c7fe5d98b48c0994a7673fb1038b2510c09.exe

C:\Users\Admin\AppData\Local\Temp\2c636bd447149f8978fb640f91594c7fe5d98b48c0994a7673fb1038b2510c09.exe
"C:\Users\Admin\AppData\Local\Temp\2c636bd447149f8978fb640f91594c7fe5d98b48c0994a7673fb1038b2510c09.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:2820

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads