c22759aaa1707d6381a96dff0fcd3a17840ce11a9b651548cdb0b2cedaac34f9

Analysis

max time kernel
150s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/10/2026, 17:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
c22759aaa1707d6381a96dff0fcd3a17840ce11a9b651548cdb0b2cedaac34f9.exe
Size 564KB
Sample261018-v2b86sft4p
SHA256 c22759aaa1707d6381a96dff0fcd3a17840ce11a9b651548cdb0b2cedaac34f9
MD5 85b7a0c28389b761222e4ac1df9dfb3c
SHA1 3bf8a94bc5a0b7d5db0355b938e9956e3aac8e9a
SHA512 83520922ac049aff7d55835f4fc48f9afa6792071208a8dade541ef0fff490340498ba112a4cc687a5ffb866451037c6746b8299d05bf339ee185b782896af55
SSDEEP 6144:n+iJj/X4CP/AKbIM1xv4Of48f3Z37oBwurXzzzFYZ/sFg+RLmJ0JI0JLGtY:+2LbIM1xwOwwZ3owymZ/sFgrJaI4G
TLSH
T172C4F161EA8BCAA9EB8D5A34AF356B71A024D7312791153DE1A025FCFFE18C0DD42347
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	c22759aaa1707d6381a96dff0fcd3a17840ce11a9b651548cdb0b2cedaac34f9.exe

C:\Users\Admin\AppData\Local\Temp\c22759aaa1707d6381a96dff0fcd3a17840ce11a9b651548cdb0b2cedaac34f9.exe
"C:\Users\Admin\AppData\Local\Temp\c22759aaa1707d6381a96dff0fcd3a17840ce11a9b651548cdb0b2cedaac34f9.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2156

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2156-0-0x0000000000475000-0x0000000000476000-memory.dmp

Download

memory/2156-1-0x0000000000475000-0x0000000000476000-memory.dmp