3e4f745485e9a68c198f0cc6d108922c13ec782db5dfb0c1e99cffe3992cd584

Analysis

max time kernel
148s
max time network
114s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/09/2026, 10:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
3e4f745485e9a68c198f0cc6d108922c13ec782db5dfb0c1e99cffe3992cd584.exe
Size 257KB
Sample260916-mcjmysak2z
SHA256 3e4f745485e9a68c198f0cc6d108922c13ec782db5dfb0c1e99cffe3992cd584
MD5 ccfca0633bf9b52e0f27265935d6a1a7
SHA1 2237872be29fe8258c4af9827d684aea2558bbe8
SHA512 7497968da062336c3cfb3e700bee943204498a2f1d9eaaeac82924703ed3342d000e8d8a40b7f4eb1289adf1df817c011a649e88972a3ab4c54f373ef4f3869e
SSDEEP 3072:EoZH2r5TrMhApAv0aA9cftLQo+oMBSqZn5WalB7FJzmIjMbJc5Nxmgk6ikTxRB:EoZH2GhApAv0aA9cftUZHt5CqTxn
TLSH
T13C44C614EBF1E517F5B29EB52AF343A65936F8556B30850BAB84390F1C31E50CBAB702
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	3e4f745485e9a68c198f0cc6d108922c13ec782db5dfb0c1e99cffe3992cd584.exe

C:\Users\Admin\AppData\Local\Temp\3e4f745485e9a68c198f0cc6d108922c13ec782db5dfb0c1e99cffe3992cd584.exe
"C:\Users\Admin\AppData\Local\Temp\3e4f745485e9a68c198f0cc6d108922c13ec782db5dfb0c1e99cffe3992cd584.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:5128

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5128-0-0x000000000040C000-0x000000000040D000-memory.dmp

Download

memory/5128-1-0x0000000000400000-0x0000000000447000-memory.dmp