87a55b0b7bd04c52889d7bedeb94f4f6d39ca1331524947a180882114b06b6f9

Analysis

user interaction
yes
max time kernel
149s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
11/10/2026, 16:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
VoicemodProV3CrackLicenseKey2026FreeDownload.exe
Size 4.2MB
Sample261011-tkrf4axt6p
SHA256 87a55b0b7bd04c52889d7bedeb94f4f6d39ca1331524947a180882114b06b6f9
MD5 d26ebd3d3e7af5f96c9ba835d1da677a
SHA1 f5f8a954a392f7442c5c9ecd9cca1032cc9ef84a
SHA512 7c7238e7b7caa8938dd52e916476f5d25b1b0baa8e45f3d15d21faf794026cc270baad00d23dc001121665271e68a104d15132aad965a556c8678ad62929fc2b
SSDEEP 98304:KiDj+6GqBH6KwsvcHJ4c91usxgkod1sc+333PT:XjpG5ucZus5Qn8T
TLSH
T103267D13F784653EE46B1A3A4837A254993B7E303A16CC477BFC298C4F396406D2A797
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	VoicemodProV3CrackLicenseKey2026FreeDownload.exe

C:\Users\Admin\AppData\Local\Temp\VoicemodProV3CrackLicenseKey2026FreeDownload.exe
"C:\Users\Admin\AppData\Local\Temp\VoicemodProV3CrackLicenseKey2026FreeDownload.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:560

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/560-0-0x00000000014F0000-0x00000000014F1000-memory.dmp

Download

memory/560-1-0x0000000000EF0000-0x0000000001342000-memory.dmp