e7f0dbebebd56a27973424d62f816dbd4c08b2ee33ffa0123e321a18979ada4b

Analysis

max time kernel
148s
max time network
140s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 04:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
e7f0dbebebd56a27973424d62f816dbd4c08b2ee33ffa0123e321a18979ada4b.exe
Size 2.3MB
Sample261102-e3mhjag17l
SHA256 e7f0dbebebd56a27973424d62f816dbd4c08b2ee33ffa0123e321a18979ada4b
MD5 5002881c211ec4b7bf23c3011f61d55b
SHA1 d118f9526aec7ebe4601e4ac1dc361fd560bda6a
SHA512 4677e1a0ae04abb7e1265f80efc8f22a18fa8d0d60ffa52dd999026445bb06b931f2b8e8ddbad2afdb79049481410dba410b58382314b1d851bfc7b9c756b857
SSDEEP 49152:/hOzu+m57u9G/mKVSdKgHUaZ0/PPRYjpUDSoe2VK:wmw9G/bVSyaAPRcUeoeA
TLSH
T168B5AF207B84C236D6A305B0E87EAA5E501DAD610B6645C7E3C53F1E9C73ED22E3365B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	e7f0dbebebd56a27973424d62f816dbd4c08b2ee33ffa0123e321a18979ada4b.exe

C:\Users\Admin\AppData\Local\Temp\e7f0dbebebd56a27973424d62f816dbd4c08b2ee33ffa0123e321a18979ada4b.exe
"C:\Users\Admin\AppData\Local\Temp\e7f0dbebebd56a27973424d62f816dbd4c08b2ee33ffa0123e321a18979ada4b.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4916

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4916-0-0x0000000000400000-0x0000000000659000-memory.dmp

Download

memory/4916-1-0x0000000000400000-0x0000000000659000-memory.dmp