5a3d17af1ca509b5e77b266170b6a157eee5fc26852039423320a9734ea28034

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/10/2026, 14:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
5a3d17af1ca509b5e77b266170b6a157eee5fc26852039423320a9734ea28034.exe
Size 76KB
Sample261003-r9we8ssxes
SHA256 5a3d17af1ca509b5e77b266170b6a157eee5fc26852039423320a9734ea28034
MD5 ad516557b2ddbc51c12081a210e64e5e
SHA1 5eaae1d03542b70bbc8a4cf39fb9e819e1223932
SHA512 b86027b81f473841a5e1f204add1cb2442d93c778ea3a63d425e890523e3195dc751803de37f1f5ea2456474f252502a5c7c1c66e21769ec157dd853033f9dd0
SSDEEP 1536:ZHnnXKplhVhkDNpNeLkrvwYRlga50m23GTnw2f9:ZHnXilhVhkRTeLkrvwYRln50XsV
TLSH
T1DE73B70EBBFB5F29DDB66A7859B6855B4737F920F931860F220C00094F63A504BA772D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	5a3d17af1ca509b5e77b266170b6a157eee5fc26852039423320a9734ea28034.exe

C:\Users\Admin\AppData\Local\Temp\5a3d17af1ca509b5e77b266170b6a157eee5fc26852039423320a9734ea28034.exe
"C:\Users\Admin\AppData\Local\Temp\5a3d17af1ca509b5e77b266170b6a157eee5fc26852039423320a9734ea28034.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2692

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2692-0-0x0000000000400000-0x000000000041B000-memory.dmp

Download