378bc2cfa9a07148e87b99fe0f5f65685419aa573f0f9af4edb5b82c78133ee8

Analysis

max time kernel
148s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 10:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
378bc2cfa9a07148e87b99fe0f5f65685419aa573f0f9af4edb5b82c78133ee8.exe
Size 7.4MB
Sample261102-mlc7jaswfw
SHA256 378bc2cfa9a07148e87b99fe0f5f65685419aa573f0f9af4edb5b82c78133ee8
MD5 44ec710924b6de9ac942f6acaca471e2
SHA1 0b7d937adc47cb2ce3aea6aa9dbb57375bc01d89
SHA512 370ffde4968bf9d688d78fc52c032840a2b53fc8fc16814b0888b94ea47fe7279186a1c9fa7736ff3e83f4286f5bc95a87041525fd603e769adf8e84c03b4d27
SSDEEP 196608:9x7oXmqHDfPp3SpLMnOk1CPwDv3uF0jaRCiBrqW4lFV20rxF:9x7oXmqHDf8pLMnOk1CPwDv3uFwanBr2
TLSH
T169769D11B7C58432E5B31E799C2A9AA8593ABE205F34C4CB7FB4394C4E35BC0A935397
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	378bc2cfa9a07148e87b99fe0f5f65685419aa573f0f9af4edb5b82c78133ee8.exe

C:\Users\Admin\AppData\Local\Temp\378bc2cfa9a07148e87b99fe0f5f65685419aa573f0f9af4edb5b82c78133ee8.exe
"C:\Users\Admin\AppData\Local\Temp\378bc2cfa9a07148e87b99fe0f5f65685419aa573f0f9af4edb5b82c78133ee8.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4848

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4848-0-0x0000000000400000-0x0000000000B64000-memory.dmp

Download