5cd740f4b673bb5321079fa7c016fd74b1e42b6089af0ceecee42cd25e7ce407

Analysis

max time kernel
148s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/10/2026, 14:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
5cd740f4b673bb5321079fa7c016fd74b1e42b6089af0ceecee42cd25e7ce407.exe
Size 58KB
Sample261003-ry24ms1anb
SHA256 5cd740f4b673bb5321079fa7c016fd74b1e42b6089af0ceecee42cd25e7ce407
MD5 df39c662b8d9e5b70d9ad5e223480a78
SHA1 835ea1cb81f5c612587b432b12b5e13ce305321c
SHA512 a273fa48f37cf1ab734eeb1d2c65bbeb0e8833d28971c5c7a98aedf16c87ad8160e7038bd80268707c8e1c3496435db91bf84472025b1e6c04e6462ea9db1faf
SSDEEP 384:nVH2NWV+rz9IyPynToHcFMKUHRDUg/4t16pQumWqc5Vsz81lUTN7rqolGja6LloI:l4jr+55MLZLO6iWKzk68VHQWVD5rHd
TLSH
T100435C32D1D3EE5BE8570370EC9BE264A676E1496F94CC4B6578773E3A9135000A631F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	5cd740f4b673bb5321079fa7c016fd74b1e42b6089af0ceecee42cd25e7ce407.exe

C:\Users\Admin\AppData\Local\Temp\5cd740f4b673bb5321079fa7c016fd74b1e42b6089af0ceecee42cd25e7ce407.exe
"C:\Users\Admin\AppData\Local\Temp\5cd740f4b673bb5321079fa7c016fd74b1e42b6089af0ceecee42cd25e7ce407.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:476

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/476-0-0x0000000000400000-0x0000000000416000-memory.dmp

Download