4703b2ed0cdcdaec2b30bd72c7f5d56f6c42fedb72226ab524c91a5160099f0f

Analysis

max time kernel
148s
max time network
130s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/10/2026, 11:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
4703b2ed0cdcdaec2b30bd72c7f5d56f6c42fedb72226ab524c91a5160099f0f.exe
Size 1.4MB
Sample261002-n11rtazdrb
SHA256 4703b2ed0cdcdaec2b30bd72c7f5d56f6c42fedb72226ab524c91a5160099f0f
MD5 781c7fb9314c06cb6e15dbb8b2e3ab63
SHA1 3baa90a10f9049b6361ba1d9864951440631fff8
SHA512 fc8ed94a0bd710fbc985bf549bd0a210934a2638ec0c7d727eeb75455f50618f247383c912cd0a986b382f1bdf2497de9b078f9bb7a76e4b559b301e803b0edf
SSDEEP 24576:2sfB/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:ffBLNiXicJFFRGNzj3
TLSH
T1A26523936BCDC1B1EBBA003749769019A2465F285B2545D3F2043E1FA578FE7CE39362
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	4703b2ed0cdcdaec2b30bd72c7f5d56f6c42fedb72226ab524c91a5160099f0f.exe

C:\Users\Admin\AppData\Local\Temp\4703b2ed0cdcdaec2b30bd72c7f5d56f6c42fedb72226ab524c91a5160099f0f.exe
"C:\Users\Admin\AppData\Local\Temp\4703b2ed0cdcdaec2b30bd72c7f5d56f6c42fedb72226ab524c91a5160099f0f.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:5792

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5792-0-0x0000000000400000-0x0000000000573000-memory.dmp

Download

memory/5792-1-0x0000000000400000-0x0000000000573000-memory.dmp