ff2d5a444b4d2c842661d1d22b7a8aee51ee1e9e6770f2a27956390e187485c0

Analysis

max time kernel
150s
max time network
111s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/09/2026, 15:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
V2.1.6.0/bin/vos3000client.exe
Size 26.7MB
Sample260916-spfdysbd86
SHA256 ff2d5a444b4d2c842661d1d22b7a8aee51ee1e9e6770f2a27956390e187485c0
MD5 f780ae02a973132f4f5a44c2d89820df
SHA1 39d07afa8554f6a2a97ffd704fe32bb46b55de09
SHA512 2e1935db4b6e005544427463eda33ad868d1f9eccccee49543df8a82f59fb163378e7963b3a9407d63055315c8f4c259a539dd2d41644ee446aaab925f761bee
SSDEEP 786432:+N1BG+lK0Pw2BtLUMIQpSHV8EzzAz3+EHYgTBcYNs:GKYzBtLHIISHWEAz3vHJTBxs
TLSH
T129571239E68C3C11E433717181E2185638BD9868F3F656626ABCB6A7DE32C095F73B14
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	vos3000client.exe

C:\Users\Admin\AppData\Local\Temp\V2.1.6.0\bin\vos3000client.exe
"C:\Users\Admin\AppData\Local\Temp\V2.1.6.0\bin\vos3000client.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2780

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads