7294865d960d2cd22289ddbdff449175b79f385855f471d4ac7e78f25e7463e7

Analysis

max time kernel
150s
max time network
145s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/09/2026, 01:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
7294865d960d2cd22289ddbdff449175b79f385855f471d4ac7e78f25e7463e7.exe
Size 1.7MB
Sample260908-btfrvaxybw
SHA256 7294865d960d2cd22289ddbdff449175b79f385855f471d4ac7e78f25e7463e7
MD5 7f107da1695c2c845bcb5fa3c9062637
SHA1 ee367df84dcb0e3fb2d5ce2c31b43cd22f66d022
SHA512 953e1cc3baab10ac79689dd5fc85ab388bcfd6c53851b781b43e183938977c53998e7ccd7e21ef5475212d9ef87b04de91ffec53a96b24c454686040b1ce7952
SSDEEP 24576:Ktwnsz4ZCzNuPQuZ7dwnpFmjRxn4sgP+qo+eeQ476kWt4nQ/tbw/2Mkjy6Fr7g0j:SGd7L4sgLbX76kWt4Q/lFTjN4
TLSH
T13885BF13BBD7B3F1DAF521B011AA6F36912BBD8217283BEB1319362E58741C11C7535A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	7294865d960d2cd22289ddbdff449175b79f385855f471d4ac7e78f25e7463e7.exe

C:\Users\Admin\AppData\Local\Temp\7294865d960d2cd22289ddbdff449175b79f385855f471d4ac7e78f25e7463e7.exe
"C:\Users\Admin\AppData\Local\Temp\7294865d960d2cd22289ddbdff449175b79f385855f471d4ac7e78f25e7463e7.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1284

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1284-0-0x0000000000400000-0x00000000005BA000-memory.dmp

Download