aabd06d945df687a3c03513d5111676c416c6f98f41cd42bb986ea8ae44335e0

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/09/2026, 10:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
aabd06d945df687a3c03513d5111676c416c6f98f41cd42bb986ea8ae44335e0.dll
Size 618KB
Sample260916-mapfeswygx
SHA256 aabd06d945df687a3c03513d5111676c416c6f98f41cd42bb986ea8ae44335e0
MD5 bdd83ed5cb50ce0d4c2938c41eefaf07
SHA1 a5fe113aa11956c05ac3ef54e57c9c67bd355969
SHA512 cd8bdc08a793ceb97d13b77a3955b8782ae61bac2ebdb7b086fb0eddf54823420fb08edccc804a66dddb7abc3b2b43bed5773df4703b94b0d3bb01571d94ef48
SSDEEP 12288:5PRtu0dFv9VYciZ6YaW27tMlM9HclbCuQ:fXD1iZ6YE7toMxcm
TLSH
T1E6D45E11E9C688F3DB9A09714963A20F46BBEA00E753EFD77F0964B86A617112F1D31C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 2724 wrote to memory of 3312	2724	rundll32.exe	87

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\aabd06d945df687a3c03513d5111676c416c6f98f41cd42bb986ea8ae44335e0.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2724
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\aabd06d945df687a3c03513d5111676c416c6f98f41cd42bb986ea8ae44335e0.dll,#1
  2⤵
  - System Location Discovery: System Language Discovery
  PID:3312

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads