5adece8a3d1b99eb165abd2e8fec9bb5744f7b4b7b61c0eab29494d4fb67fd65

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/10/2026, 04:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
5adece8a3d1b99eb165abd2e8fec9bb5744f7b4b7b61c0eab29494d4fb67fd65.exe
Size 702KB
Sample261027-e3h54sys5p
SHA256 5adece8a3d1b99eb165abd2e8fec9bb5744f7b4b7b61c0eab29494d4fb67fd65
MD5 6da12b8935448030b51f93727361de34
SHA1 e67a2a5cad598d7335afe7f72945f6d4b0794b3e
SHA512 505bcba8df7dce561ea963a0ac8ccc4bce1d883a952987f731d983367ffe1ed1b8037e711a113750d8824c8655fe875241b5d59955313aa1a7dad7c5148731d5
SSDEEP 12288:bu1wzKRYL44YReZxJqiOkMOFG9B4RZcW6S62czqSEnTYQj4BgpKp:aaXc45/k2D3CjGVOBAK
TLSH
T16CE40112B5E54A31E1B2667198B09AA18B3DFD304F25D9DF738961AE19303C0DB34FB2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	5adece8a3d1b99eb165abd2e8fec9bb5744f7b4b7b61c0eab29494d4fb67fd65.exe

C:\Users\Admin\AppData\Local\Temp\5adece8a3d1b99eb165abd2e8fec9bb5744f7b4b7b61c0eab29494d4fb67fd65.exe
"C:\Users\Admin\AppData\Local\Temp\5adece8a3d1b99eb165abd2e8fec9bb5744f7b4b7b61c0eab29494d4fb67fd65.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3164

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads