8d03424eb7b95692d1ace75c914d5a491cdcd4ec8b27742ff81c44178e1d4398

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/10/2026, 16:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
8d03424eb7b95692d1ace75c914d5a491cdcd4ec8b27742ff81c44178e1d4398.dll
Size 355KB
Sample261014-va5fmsfz4v
SHA256 8d03424eb7b95692d1ace75c914d5a491cdcd4ec8b27742ff81c44178e1d4398
MD5 af5999c9de98269692db5b281fcb215a
SHA1 ad35b583ce50b3ba7c66276b1dc5006a07d3b4b8
SHA512 5f28f6c4513dfa154d1a712225ac5dd3eb96621381e36cda956de5e4f2ff3343ec00157ad849337a019a104e058e3f7db14d8438f2c6470e41085036e50a6fb8
SSDEEP 3072:Yo3MUzsnfJ1J24iBXB7RoZznU3SXfErKZ:1MsJRoATKZ
TLSH
T13074D590B5E06DA7E616C3399CD3E12136396642631BDF1BD2089D3C0A6B7D33ED2D4A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 2384 wrote to memory of 2784	2384	regsvr32.exe	90

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\8d03424eb7b95692d1ace75c914d5a491cdcd4ec8b27742ff81c44178e1d4398.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:2384
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\8d03424eb7b95692d1ace75c914d5a491cdcd4ec8b27742ff81c44178e1d4398.dll
  2⤵
  - System Location Discovery: System Language Discovery
  PID:2784

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads