79ddd39ac31750631e37fca0101665e1afe66334a7b2804dfb6e613a1a6e7e5c

Analysis

max time kernel
148s
max time network
147s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 13:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
79ddd39ac31750631e37fca0101665e1afe66334a7b2804dfb6e613a1a6e7e5c.exe
Size 2.7MB
Sample261102-qsaxjacv3n
SHA256 79ddd39ac31750631e37fca0101665e1afe66334a7b2804dfb6e613a1a6e7e5c
MD5 354a099b33c857893594d76c2e9d3ce8
SHA1 ad57a20fb6830d59a947e74a8b9fe9eabe8ffe10
SHA512 8f06a482ebef16bc053c9b67728c091583c18fc85e330a9e31c3dfc0af4c1fc5c914954698b9acc70b6f290246a384cd0dfa625f7ba0cd7b1a0451892498f909
SSDEEP 49152:6mF4K2AE3zSGdC2aTjMj4UA38f0l1kl8UU8xJXxss/PYTIDdMe3vyeQFP7s:VFh2AEOghaTC4Uakl82xJhssHUIhARA
TLSH
T19DD5236D18DF40D9D14229B07B0722E336F56246CA944D3E2EC63885F071EBB61AEDE7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	79ddd39ac31750631e37fca0101665e1afe66334a7b2804dfb6e613a1a6e7e5c.exe

C:\Users\Admin\AppData\Local\Temp\79ddd39ac31750631e37fca0101665e1afe66334a7b2804dfb6e613a1a6e7e5c.exe
"C:\Users\Admin\AppData\Local\Temp\79ddd39ac31750631e37fca0101665e1afe66334a7b2804dfb6e613a1a6e7e5c.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:960

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4756

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/960-0-0x0000000000B00000-0x0000000000F66000-memory.dmp

Download