24a1bebc8ea50bb00967f8bfa93b9b7ff17f72b0728e4e5b689f55c43844a9d3

Analysis

max time kernel
148s
max time network
135s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/09/2026, 06:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
shttp3r.exe
Size 144KB
Sample260913-gyrb2avvb1
SHA256 24a1bebc8ea50bb00967f8bfa93b9b7ff17f72b0728e4e5b689f55c43844a9d3
MD5 0108db07021d4a4b12ee931e7421c1d5
SHA1 71dcf3793b4928e2db91a247203d743133389674
SHA512 a10378cb45d0e58345075003c4463f046a4813a7747a180b68543b3b34aff675f534a8c7079a2ca5280d412d94c53c3d1391b08abb1a07b3323b4ab8bc236b6b
SSDEEP 3072:hmR9NJb45z6nySrJx1lw1uw4GWniZAkQzHV8xW:hmR9P452nvrJtw8xnNkQz+Q
TLSH
T19EE312F64B0ECB5BC2200270D25BE739AC2082D51449871ADB347E6CFBD961ECE775A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	shttp3r.exe

C:\Users\Admin\AppData\Local\Temp\shttp3r.exe
"C:\Users\Admin\AppData\Local\Temp\shttp3r.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2212

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2212-0-0x0000000000400000-0x000000000042F000-memory.dmp

Download

memory/2212-1-0x0000000000400000-0x000000000042F000-memory.dmp