Analysis
- max time kernel
148s - max time network
146s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/09/2026, 12:33
General
- Target fakefmt.exe
- Size 289KB
- Sample260910-prgs1stbna
- SHA256 8163c62e1d9f677afac99cf09de208ec1bacb7719ac6e76da29a7f4a9270cf90
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\fakefmt.exe"C:\Users\Admin\AppData\Local\Temp\fakefmt.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
$RJ$.DAT
memory/4588-348-0x0000000000400000-0x000000000044D000-memory.dmp
memory/4588-671-0x0000000000400000-0x000000000044D000-memory.dmp
memory/4588-8-0x00000000021D0000-0x00000000021D1000-memory.dmp
memory/4588-25-0x0000000000400000-0x000000000044D000-memory.dmp
memory/4588-187-0x0000000000400000-0x000000000044D000-memory.dmp
memory/4588-0-0x00000000021D0000-0x00000000021D1000-memory.dmp
memory/4588-510-0x0000000000400000-0x000000000044D000-memory.dmp
memory/4588-1-0x0000000000438000-0x0000000000439000-memory.dmp
memory/4588-833-0x0000000000400000-0x000000000044D000-memory.dmp
memory/4588-994-0x0000000000400000-0x000000000044D000-memory.dmp
memory/4588-1156-0x0000000000400000-0x000000000044D000-memory.dmp
memory/4588-1318-0x0000000000400000-0x000000000044D000-memory.dmp
memory/4588-1463-0x0000000000400000-0x000000000044D000-memory.dmp
memory/4588-1476-0x0000000000400000-0x000000000044D000-memory.dmp