fceaac7a3f62f8728fce99ed1035407678e7f81ff2fdd09dddf4c82bceaa4b96

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
11/10/2026, 04:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
fceaac7a3f62f8728fce99ed1035407678e7f81ff2fdd09dddf4c82bceaa4b96.exe
Size 952KB
Sample261011-e68j6sx12m
SHA256 fceaac7a3f62f8728fce99ed1035407678e7f81ff2fdd09dddf4c82bceaa4b96
MD5 08c457b583a5dc435ce9ba4593f2bb79
SHA1 6fe618448190d7c13df628c11ebc3eebb6dbe0f6
SHA512 6c4c2ac405aad8723c512865e81a167b1a9762aaa43aafe3ed497841e5a83eefa0d2a66310cfbc52248a759d76ac421681e152be1a6a1aaa5726e033c49da546
SSDEEP 24576:z2wbljnLw1QIxbFmqdvvYAFdZZy3YyzpXGm7L/qOMw:z2SlEpBmqRvYAHNyzpXLz
TLSH
T19825F133EBCD50A6DEA64034196B91B5A2E7F0ED6318B0CF2F55D93788904D0D9F836A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	fceaac7a3f62f8728fce99ed1035407678e7f81ff2fdd09dddf4c82bceaa4b96.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	5964	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	5964	AUDIODG.EXE

C:\Users\Admin\AppData\Local\Temp\fceaac7a3f62f8728fce99ed1035407678e7f81ff2fdd09dddf4c82bceaa4b96.exe
"C:\Users\Admin\AppData\Local\Temp\fceaac7a3f62f8728fce99ed1035407678e7f81ff2fdd09dddf4c82bceaa4b96.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3720

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004F0 0x00000000000004F8
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5964

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads