b46f4477a3dc798b92631c215cd92de027d99d708578b7c6384fb33ade72646b

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 07:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
b46f4477a3dc798b92631c215cd92de027d99d708578b7c6384fb33ade72646b.exe
Size 1.8MB
Sample261102-jf5sta1yas
SHA256 b46f4477a3dc798b92631c215cd92de027d99d708578b7c6384fb33ade72646b
MD5 73cc74eead1cb2ac8105963a8785208c
SHA1 b6a60ebe60f1641b3b6ad3fb3b011359e50bad08
SHA512 d4794dabd92259dad02ec28ff57e33d6a458e157b654d2e347c1c8de08ac022473b7c756e0ed4363617d8380498506f25f2fef93379f96fbe9ef00437e268547
SSDEEP 24576:7ngNn+RMtST97+HEqIytvhhUhxe0DRkhonOHyW2oYjpNluvDSoe2nnVyjLQ:7nKeN+HJIUhhUznOPRYjpUDSoe2VK
TLSH
T12995AF20BA97C135E7B301B1BDBDAA5D502DBD640B2640CBE3D03A1E1872EC16E7765B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	b46f4477a3dc798b92631c215cd92de027d99d708578b7c6384fb33ade72646b.exe

C:\Users\Admin\AppData\Local\Temp\b46f4477a3dc798b92631c215cd92de027d99d708578b7c6384fb33ade72646b.exe
"C:\Users\Admin\AppData\Local\Temp\b46f4477a3dc798b92631c215cd92de027d99d708578b7c6384fb33ade72646b.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3712

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3712-0-0x0000000000400000-0x00000000005E3000-memory.dmp

Download

memory/3712-2-0x0000000000400000-0x00000000005E3000-memory.dmp