730f2586bc8501999287224d38aa209760aec090f9c29418622ce01b243e2869

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
17/10/2026, 02:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
730f2586bc8501999287224d38aa209760aec090f9c29418622ce01b243e2869.exe
Size 4.4MB
Sample261017-cy46nsvxct
SHA256 730f2586bc8501999287224d38aa209760aec090f9c29418622ce01b243e2869
MD5 a7ab86cc9124010052d897cc3d89a45e
SHA1 1e79aaf36cb0e4885448b11aeede36dbd3403f0f
SHA512 c5b281592dd411673dd31e21a18c252809cb8c82d685778748cbe2ebaded06c4edce03aa773f80f901860c6a23dc2757ebdbb2a05031c672a463af1e010ec0cf
SSDEEP 98304:A2/yC7PBaUR56fJR56fJR56fb+taR56flrag8QDqIP:A2/yC7JaUR56xR56xR56S4R56Jag8QD
TLSH
T16E26D047FD254124F881403FB5BBAB92423C7E2A0B599BC371D5BA6B5A301CB7B3251B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	730f2586bc8501999287224d38aa209760aec090f9c29418622ce01b243e2869.exe

C:\Users\Admin\AppData\Local\Temp\730f2586bc8501999287224d38aa209760aec090f9c29418622ce01b243e2869.exe
"C:\Users\Admin\AppData\Local\Temp\730f2586bc8501999287224d38aa209760aec090f9c29418622ce01b243e2869.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3332

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3332-0-0x0000000000400000-0x000000000087B000-memory.dmp

Download