7e710875be4d15c92031b9ff9f274b856df9555972aaebccf8538f87d3141b95

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 03:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
7e710875be4d15c92031b9ff9f274b856df9555972aaebccf8538f87d3141b95.exe
Size 5.7MB
Sample261102-d6g7jsst7j
SHA256 7e710875be4d15c92031b9ff9f274b856df9555972aaebccf8538f87d3141b95
MD5 fbace805b36d738ef974bdd6d94b2ed0
SHA1 dd22feff1730b57bdc7ac3234509be27f3869f05
SHA512 c56c649662b98ce106d98997426eb9041142a0e88a75213db7bdc91490a6d19d80db1be3e3c16171dc55fc1e4227583425857e25939b64ca91b60eb2f99b3d69
SSDEEP 98304:GuQvEkvCnCW02zrwnlQ2RPlptI+vvgBPAbnEeO9lP:eWnCW02zrwnllQPADc
TLSH
T16E569E20B9C18235FAD230B65ABDFB6F917D5AE8072541C7638C196A6E70CC22B35377
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	7e710875be4d15c92031b9ff9f274b856df9555972aaebccf8538f87d3141b95.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2364	7e710875be4d15c92031b9ff9f274b856df9555972aaebccf8538f87d3141b95.exe

C:\Users\Admin\AppData\Local\Temp\7e710875be4d15c92031b9ff9f274b856df9555972aaebccf8538f87d3141b95.exe
"C:\Users\Admin\AppData\Local\Temp\7e710875be4d15c92031b9ff9f274b856df9555972aaebccf8538f87d3141b95.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2364

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2364-0-0x0000000004ABA000-0x0000000004ABB000-memory.dmp

Download