33ab65a796d267a9a185da98a438a4425c7870b010f5e5c4dc361f61cc6fcb39

Analysis

max time kernel
148s
max time network
124s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
11/10/2026, 07:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
33ab65a796d267a9a185da98a438a4425c7870b010f5e5c4dc361f61cc6fcb39.exe
Size 588KB
Sample261011-jgrycaeb75
SHA256 33ab65a796d267a9a185da98a438a4425c7870b010f5e5c4dc361f61cc6fcb39
MD5 1a47b07cae0a138047e638fd02937bd2
SHA1 630d9815745d154ef69961db99baf607aa8c1bb3
SHA512 daa490739978ab858d4ca8093842215119f135994a47fe6af28b961549e98c654680406c694cc00b688136abc5fa0e215d3dc6b255524ebbc7292324b613ccee
SSDEEP 12288:RDBXkiYHFgdpuTB1anVWqqPIBONhxsUzEq:RDBUiv+1/xsUzR
TLSH
T190D4D6F16240F55FF2D0AA336FD88A710A35F92DC5CA915B67802BAE59310F66732633
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	33ab65a796d267a9a185da98a438a4425c7870b010f5e5c4dc361f61cc6fcb39.exe

C:\Users\Admin\AppData\Local\Temp\33ab65a796d267a9a185da98a438a4425c7870b010f5e5c4dc361f61cc6fcb39.exe
"C:\Users\Admin\AppData\Local\Temp\33ab65a796d267a9a185da98a438a4425c7870b010f5e5c4dc361f61cc6fcb39.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4136

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

log.txt

Path C:\Users\Admin\AppData\Local\Temp\log.txt
Size 6KB
SHA256 84f80a8e6529652e7d8dad620781d8c2ed8e2357e294e0fbabaa0a790af1f17a
MD5 9b9b931ad4e42b4d098349d2da19b41e
SHA1 cabfda18d2f1d958e04ba47d37613b4603bfb169
SHA512 2ccb9b9d54ae180101802d1b26fb133e008f2a7b8f1fbfe6db17ccda2c9a2e6081adbbc8cded21725c4a33c0f2c5f582049936c6607ae523f492fd829dc46046
SSDEEP 96:oSHeyO777BBBBBBBB/////////////////MMMMMMMMMMMMMMMMNNNNNP:yX
TLSH
T1F2D1646F4E4EBB7B175930B4A32D20A5260005B0DF874E282A9EB44D76DDE78E252DC7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download