b8e5243b39bacf3c4ab72fc12d7db154de1d900886c9e9071fc4e90f8425f376

Analysis

max time kernel
148s
max time network
132s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
17/10/2026, 04:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
b8e5243b39bacf3c4ab72fc12d7db154de1d900886c9e9071fc4e90f8425f376.exe
Size 120KB
Sample261017-e3wffahy6t
SHA256 b8e5243b39bacf3c4ab72fc12d7db154de1d900886c9e9071fc4e90f8425f376
MD5 c69e0e2e7b740dc465f8c3a43864a839
SHA1 efe12a5be83f52156d6d23232aad00e311996c7b
SHA512 9d9a8a7259777bf42597ed9de0aa8a8aa60418a29960205b97bce4b2d8ba5ff270a9bc1d174fe92b6ca1a5f292b2286405b514d1709daf432ec839be936ddfdf
SSDEEP 1536:wQvLCnVdwGPzsBorjky7LlYSXxQ/PLoQ9YX1Qrjj8CO:4nVZzssjJPW/zqWnIX
TLSH
T167C35B33A564B863DC904A301D682E73C7766D096362FF665FDEDEBB826B0406C3A147
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	b8e5243b39bacf3c4ab72fc12d7db154de1d900886c9e9071fc4e90f8425f376.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
252	b8e5243b39bacf3c4ab72fc12d7db154de1d900886c9e9071fc4e90f8425f376.exe
252	b8e5243b39bacf3c4ab72fc12d7db154de1d900886c9e9071fc4e90f8425f376.exe

C:\Users\Admin\AppData\Local\Temp\b8e5243b39bacf3c4ab72fc12d7db154de1d900886c9e9071fc4e90f8425f376.exe
"C:\Users\Admin\AppData\Local\Temp\b8e5243b39bacf3c4ab72fc12d7db154de1d900886c9e9071fc4e90f8425f376.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:252

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:844

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads