e926912c94aa0ecf919a15982df759ccda53a9880e0e46406a643ed9ddd71b15

Analysis

max time kernel
148s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/09/2026, 16:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
e926912c94aa0ecf919a15982df759ccda53a9880e0e46406a643ed9ddd71b15.dll
Size 197KB
Sample260924-t26bksythv
SHA256 e926912c94aa0ecf919a15982df759ccda53a9880e0e46406a643ed9ddd71b15
MD5 0e2cabf3b9d989e4602d68c0a8ed5775
SHA1 681367c704f5f282080df923c874a5cfeff3fadc
SHA512 06d6bf5c0843add627081211625342e1a81781a1a88bbf906b8a52662c49626b9f017bde94707045ed0934fd944595aaec36e36d1116420beecaa4468c9d2eec
SSDEEP 1536:WMmJkVaYe/zIWUE88ugoK4B+Rwd/NHhxHx5vcMBC3RSj+MVwOGLhU:Ja3/zIWHoKMa8/NHhxHx50MBCMa6D
TLSH
T14C14B75127AD68F1D1768FF905FBDFA21B3D79430AE5874B4B14EA182C729C06EE0392
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 3528 wrote to memory of 3652	3528	regsvr32.exe	88

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\e926912c94aa0ecf919a15982df759ccda53a9880e0e46406a643ed9ddd71b15.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:3528
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\e926912c94aa0ecf919a15982df759ccda53a9880e0e46406a643ed9ddd71b15.dll
  2⤵
  - System Location Discovery: System Language Discovery
  PID:3652

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads