7f7969a228079aa00ba24ecc6ec6958e62acd08206cbcc9f5efa2a34550e66ba

Analysis

max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/09/2026, 12:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Extend_01.exe
Size 768KB
Sample260910-pp5gasgh54
SHA256 7f7969a228079aa00ba24ecc6ec6958e62acd08206cbcc9f5efa2a34550e66ba
MD5 69c7e940be8fa46da7efd3760c5f3810
SHA1 b4a7462e1ba4a292560d3ea2c2b4774a5263bd6c
SHA512 9c1702977defe150e63744fe923f7413cd1f717bcc164b0ea12f5b2439a4e638da336cdd843dda9e48535a87ddbef9b2cd9cb7922014051ea57da82b3cd0cf19
SSDEEP 12288:OQ7nkmzIrVVyzxM/4C4Wya63Heu0Nae3WxnVi3F:OQ7nXIhVy9M/nGu/3D3F
TLSH
T195F44B22B585BCB2E1B1017167BF5BFA8B2CED211715C4DFA3C009699A7C0D3363679A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Extend_01.exe

C:\Users\Admin\AppData\Local\Temp\Extend_01.exe
"C:\Users\Admin\AppData\Local\Temp\Extend_01.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1812

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads