d8e9631eebc9a1fb9be023defcf072af0cb2e0817c441827e78f7ac37b500c67

Analysis

max time kernel
148s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/10/2026, 16:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
d8e9631eebc9a1fb9be023defcf072af0cb2e0817c441827e78f7ac37b500c67.exe
Size 120KB
Sample261022-tyslbaf16n
SHA256 d8e9631eebc9a1fb9be023defcf072af0cb2e0817c441827e78f7ac37b500c67
MD5 5adfdd1605d983e215e11d4e12cd4421
SHA1 edc807604cffdb66be17619800a83d5f3a971ca2
SHA512 6845ac828d36fa2a2aa450547072cd8241d0185bd8b1c696b66f2b6c42c4682901b7d1af6c8e085a209d040e28d3bfd0b8562f0a3eb53201bdce21c290c6dc99
SSDEEP 768:IfDe41NlcV3pEQptbUcMjcZYIMExnJywhc/2ciyBUwVtcDvvVcfUaHyHnIks+I+J:mD8Z5pMyHnlRdYt8zWkOxSa5Vl7Bykm
TLSH
T13CC33B43FBDA182BF4B617B76CFF8208813FB9252574C90F955422AD0A795B4EE13326
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	d8e9631eebc9a1fb9be023defcf072af0cb2e0817c441827e78f7ac37b500c67.exe

C:\Users\Admin\AppData\Local\Temp\d8e9631eebc9a1fb9be023defcf072af0cb2e0817c441827e78f7ac37b500c67.exe
"C:\Users\Admin\AppData\Local\Temp\d8e9631eebc9a1fb9be023defcf072af0cb2e0817c441827e78f7ac37b500c67.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4872

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4872-0-0x0000000000EE0000-0x0000000000EFF000-memory.dmp

Download