cab1de9fc12d6cbd7d7821184b7120237fe61176918dcd00cb529f935478d8c5

Analysis

max time kernel
149s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 01:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
cab1de9fc12d6cbd7d7821184b7120237fe61176918dcd00cb529f935478d8c5.dll
Size 1.6MB
Sample261102-bvg2aset3x
SHA256 cab1de9fc12d6cbd7d7821184b7120237fe61176918dcd00cb529f935478d8c5
MD5 fea47b658da340bf1cbc4356310581a0
SHA1 616ffa07423074a7f2b0f8f994742f604eaed7c1
SHA512 1fe64ebb0bdacb7dc9d2d0ca37e73db1c365eede94d984e27206aeca8e44ffc90bd54d4d14f25fb05e8d4f8ed735c3becc1540f8bb37778e5eceae124a2d3303
SSDEEP 49152:SvgTzil8fmBIyGwp41DUnP+0KN98kH51JkKnajZrWpnp38rM9LwZ:Sazil8fmBrGwUYP+0KN9lH51JkKsknph
TLSH
T195758E637640C07AC22A3632DA1EB3BD72AC85308DB582876E905E3D7D755C3952F29F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 4696 wrote to memory of 4536	4696	rundll32.exe	85

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\cab1de9fc12d6cbd7d7821184b7120237fe61176918dcd00cb529f935478d8c5.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4696
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\cab1de9fc12d6cbd7d7821184b7120237fe61176918dcd00cb529f935478d8c5.dll,#1
  2⤵
  - System Location Discovery: System Language Discovery
  PID:4536

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads