88d272042a271593570458a3c81e4bb42464568878b35d09ae3a12149b67f5f2

Analysis

max time kernel
1s
max time network
4s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/10/2026, 17:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
New Client.exe
Size 65KB
Sample261029-vr2fbabg69
SHA256 88d272042a271593570458a3c81e4bb42464568878b35d09ae3a12149b67f5f2
MD5 b3927eb6efa56b12535711b89926d365
SHA1 23a88bb299d2e92bf335af808d674ec2f769dc85
SHA512 3f8323ee9e41f72271d36eda2860397943e4ce9c13445cbe7c3d92be69d34380f884d34bd281899ddce563f2c10cc2fa0c62b7e95f4a9f853eff7d9473c2ffc8
SSDEEP 1536:+YqK4Tm4BoN36t4QviFw1ajNkBnvbcfLteF3nLrB9z3nVaF9brS9vM:+YqK4C4BoN36t4QviFC6qBn4fWl9zFaH
TLSH
T11C633B4877958A55D2BD2E7844F29651C730F60B6D03F72E48D120EAABB3FC44A42BE7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	New Client.exe

C:\Users\Admin\AppData\Local\Temp\New Client.exe
"C:\Users\Admin\AppData\Local\Temp\New Client.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3136

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3136-1-0x0000000074D92000-0x0000000074D94000-memory.dmp

Download

memory/3136-0-0x00000000011B0000-0x00000000011C0000-memory.dmp