2eaaa7313c13c638e905bc1b5f3416c7974124707a3f26c732d7b64dad60778b

Analysis

max time kernel
150s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/09/2026, 08:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2eaaa7313c13c638e905bc1b5f3416c7974124707a3f26c732d7b64dad60778b.exe
Size 3.4MB
Sample260925-kr4wbsxtew
SHA256 2eaaa7313c13c638e905bc1b5f3416c7974124707a3f26c732d7b64dad60778b
MD5 1dd267892b7d0f651130f747d55068f2
SHA1 4427c8f7523383e13ebd62b310bde1de2e2959c2
SHA512 f8ddfadfead253c2abd2702565d82cb222ed66bc4af50042af80b29aed77946c7887bd4f09b6cbc9903aad5d02631c52e41693ea40d0e0d89ee587c2a8de5be9
SSDEEP 49152:/yDQkeCmaxbwAgIubaJY7Qyo3r0K0BsBacA65ecOh24Th3pCd4OnJm6gEwHHYwkM:/yDQkeSLhuba4o3r0fCjAz3
TLSH
T1BDF53A21F247C427D6A601B11A2CEF9E81387E261BB514D777DC2EAE1BB54C21236F27
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 2 IoCs

pid	Process
5236	2eaaa7313c13c638e905bc1b5f3416c7974124707a3f26c732d7b64dad60778b.exe
5236	2eaaa7313c13c638e905bc1b5f3416c7974124707a3f26c732d7b64dad60778b.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2eaaa7313c13c638e905bc1b5f3416c7974124707a3f26c732d7b64dad60778b.exe

C:\Users\Admin\AppData\Local\Temp\2eaaa7313c13c638e905bc1b5f3416c7974124707a3f26c732d7b64dad60778b.exe
"C:\Users\Admin\AppData\Local\Temp\2eaaa7313c13c638e905bc1b5f3416c7974124707a3f26c732d7b64dad60778b.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:5236

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1033.dll

Path C:\Users\Admin\AppData\Local\Temp\{C4484D6B-D33A-49C6-967F-5F1277BFDD68}\1033.dll
Size 46KB
SHA256 c10ddc9c87944f940e231115626da9fcf2ed4f1d06ff8250bf5f99708058fff5
MD5 99d4c86127a15b2fa2a5eca7320923b7
SHA1 54104706ad72990d57698d569e50a93b160ac389
SHA512 134f7c6afea56b1590e7ade4fbd0ccadc356de13498be5fcfd5c5759478bb2213c33784b5b0edc0677f22e7319aeea719a4e6d15ec53cfd5c4421189fcf769c5
SSDEEP 192:Jynn7MpGfsUMmd9g111uSw2U9hDO0hRYnYNlh6guJOGnq2fZLlETI:kApqs6dTS3U9Y0Y46VXq2PETI
TLSH
T1A423D88DE2A74092E2EE16735C75FF4EC4357C23782486397EB373DA0433991A8A4B21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download