d26f1a07e94de7d4a5a756448c52ea7b31f1254bfffd7cfd6a3945840491284e

Analysis

max time kernel
148s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/09/2026, 10:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
d26f1a07e94de7d4a5a756448c52ea7b31f1254bfffd7cfd6a3945840491284e.exe
Size 67KB
Sample260916-mc3e3ayeqc
SHA256 d26f1a07e94de7d4a5a756448c52ea7b31f1254bfffd7cfd6a3945840491284e
MD5 d2fed265f474e9d1b9b99800454c59aa
SHA1 48ada12515a7173f50d31415a26ef3c79625c047
SHA512 b0f3e52b989da8b4763ad8843e71e66cf7ace6c9db00d7922020e9ccaa6f840422262db5d6975658af38147e1196f25ab760b03e50daa523c559be90d8fb6289
SSDEEP 1536:5g7YLEKkZg6AAxVfG+0sSo9iEjWU0w3KNliU1BlbyGz/5W+zJczSP:5gELFkZg6AA7u+0sSo9Jjp+NliU1BlbF
TLSH
T19F634E05A7FD1A06FAF32F356CF945950B77FD81AE31854F4264A81E18B1B94CAB0B23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	d26f1a07e94de7d4a5a756448c52ea7b31f1254bfffd7cfd6a3945840491284e.exe

C:\Users\Admin\AppData\Local\Temp\d26f1a07e94de7d4a5a756448c52ea7b31f1254bfffd7cfd6a3945840491284e.exe
"C:\Users\Admin\AppData\Local\Temp\d26f1a07e94de7d4a5a756448c52ea7b31f1254bfffd7cfd6a3945840491284e.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1816

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1816-0-0x0000000000400000-0x0000000000428000-memory.dmp

Download