0da4e0e59170b3e2f6715e5d4b7bb3479da6c5a2f78376f4d30579f201cde69c

Analysis

max time kernel
148s
max time network
135s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
17/10/2026, 02:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
0da4e0e59170b3e2f6715e5d4b7bb3479da6c5a2f78376f4d30579f201cde69c.dll
Size 144KB
Sample261017-c5akmsgz51
SHA256 0da4e0e59170b3e2f6715e5d4b7bb3479da6c5a2f78376f4d30579f201cde69c
MD5 3d75ddf7c7a5557013ef21b839fb0239
SHA1 5441b0a124cb62decdaba7228682fe46b0e989c8
SHA512 431b6598b903a353a85b84be45b1a90d4be581df6b8db288fb2346f3a80dea89038d9ddec4770287b6e950fc7c0f1cf96d54c8ccfa1902620d915fa95ac8e5f1
SSDEEP 3072:FcRbmGympdL3Zn/vIUKD5MAZyNqIkO5qvUb2eGqWBjEUBbV6w4SyVUZHg:FcYH
TLSH
T16CE3D7A4679CC950F1739A3D38394BE5BF72F8101B3657498E86B66D0C349A8EE2D703
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 4148 wrote to memory of 2644	4148	rundll32.exe	88

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0da4e0e59170b3e2f6715e5d4b7bb3479da6c5a2f78376f4d30579f201cde69c.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4148
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0da4e0e59170b3e2f6715e5d4b7bb3479da6c5a2f78376f4d30579f201cde69c.dll,#1
  2⤵
  - System Location Discovery: System Language Discovery
  PID:2644

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads