628d0cc45ceea6903613d7e3b4372c2c52d4431204c9b0de7f8af79619d9ba80

Analysis

max time kernel
148s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/10/2026, 09:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
628d0cc45ceea6903613d7e3b4372c2c52d4431204c9b0de7f8af79619d9ba80.exe
Size 727KB
Sample261014-k1f6maax21
SHA256 628d0cc45ceea6903613d7e3b4372c2c52d4431204c9b0de7f8af79619d9ba80
MD5 a1950dd893d530e2237f0af111e65e57
SHA1 50a56f3499e0869a0612d242b08f5e3b4abfe36b
SHA512 7a6d87d831a63f0dc2797878c1be8b8a11cb67da44596daecf99849c4af3ddba2f08e91e48fa026dcfdab3b1f2f0b2173fd3adf3ff3faf151bda7ed051206d67
SSDEEP 12288:Je8uCXBdz/h9SiYl+Op4FaVADVonysdqB7PGd5OEI/QTeU7kbWqNCkTH9F3/r+:s8uCXBdz/hJLFqADVo3dK7slnkCqN7TC
TLSH
T107F48F62B981C037E1B2003196BDA7B66D7DB9301B2585CBA3D50B7C6B305D1BE3876B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	628d0cc45ceea6903613d7e3b4372c2c52d4431204c9b0de7f8af79619d9ba80.exe

C:\Users\Admin\AppData\Local\Temp\628d0cc45ceea6903613d7e3b4372c2c52d4431204c9b0de7f8af79619d9ba80.exe
"C:\Users\Admin\AppData\Local\Temp\628d0cc45ceea6903613d7e3b4372c2c52d4431204c9b0de7f8af79619d9ba80.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3784

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

update.log

Path C:\Users\Admin\AppData\Local\Temp\log\update.log
Size 533B
SHA256 235dca3a77f5937159d0244a1cbccaa4b7fb6c42d5bc4fc44535030aa1780f02
MD5 63212d24c56b7ba674779cd4ef5dab3f
SHA1 91c37289a6259214c89abaab075ccd5f6396e352
SHA512 0d617952f94b1e9147911dc086f83d6b2945a88dc5398af3032af2ed8e68c688f3bcaa8aa8581797b59b09153b386a03ff3e15f46f9c5a315e6ea365737a067a
TLSH
T198F0E5810C0541610604F96A22D230B6FAF3B5B716431D169273FB0A1987006E5AE8BB
MD5 SHA1 SHA512 TLSH

Submit Download