d14e6393e41c800e8fe707f2c1341641ad854995102fbf9820cd8140fe9e2d75

Analysis

max time kernel
148s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/10/2026, 00:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
d14e6393e41c800e8fe707f2c1341641ad854995102fbf9820cd8140fe9e2d75.exe
Size 3.0MB
Sample261014-awtaaaet3m
SHA256 d14e6393e41c800e8fe707f2c1341641ad854995102fbf9820cd8140fe9e2d75
MD5 856c7d9f458cb9ffa05432c51fe8afdd
SHA1 4dcb21a7e76bcdf8f049ffb0e2678d25794e6631
SHA512 68ca64cdf90d8c85717eea3333741d50d5c5c53058d3def41beb1097159aa7df1fb7b68c451f54adfab42d96a19c74df81cbe5ed49cdd8cc4274d6a590c895db
SSDEEP 24576:dGoL2ooztNPo4GB3IiroWcTNvkyqPIJgF5/B5GNGI0GadVbiLcucc5V5uB:ss2vk4GeisWcTNvdmD/B5GNmBbiLG
TLSH
T16EE5CF46FF42DAB3CC6C0774A9AD9B58273AEA405F41DB5B3244327AEC373E05E1215A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	d14e6393e41c800e8fe707f2c1341641ad854995102fbf9820cd8140fe9e2d75.exe

C:\Users\Admin\AppData\Local\Temp\d14e6393e41c800e8fe707f2c1341641ad854995102fbf9820cd8140fe9e2d75.exe
"C:\Users\Admin\AppData\Local\Temp\d14e6393e41c800e8fe707f2c1341641ad854995102fbf9820cd8140fe9e2d75.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3804

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3804-0-0x00000000005D0000-0x0000000000796000-memory.dmp

Download