3fdcd30004c4a90924c62337584de33b623498c86dc6cf68a859d71b6883068f

Analysis

max time kernel
148s
max time network
117s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/09/2026, 00:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
mKilroy.exe
Size 74KB
Sample260910-ajn5ssec25
SHA256 3fdcd30004c4a90924c62337584de33b623498c86dc6cf68a859d71b6883068f
MD5 064218556a833eecb3c82f3973be64b8
SHA1 b5e67448ed776b5a5fe6c6ff17854acedf742eed
SHA512 af288cf9aac143622840f997346d0450585927aac55b6634e91866105bc10fb4d922c4ef71ce545c134afaabb7fd7fff3d691621af8de5b7e05101179ccd312f
SSDEEP 768:pGWGk0/JXNVepUHPvFc5xf9ddYj9+cNatEnTys6yJZah8ESj4av1WHop5Vj/Itir:QJNLHaBddYj2ETDNJs2h2opnzkinAf8
TLSH
T1F073C013B8D249FFD584563528AA2731AB77B815012997436F00E9AB9C3337BDF16363
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mKilroy.exe

C:\Users\Admin\AppData\Local\Temp\mKilroy.exe
"C:\Users\Admin\AppData\Local\Temp\mKilroy.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:5424

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads