03706b9fba5f7cce8e1507c3eb330957c4a7d311f0fc84c502328e1f6e2c42c1

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 15:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
03706b9fba5f7cce8e1507c3eb330957c4a7d311f0fc84c502328e1f6e2c42c1.exe
Size 180KB
Sample261102-szzwcaa17x
SHA256 03706b9fba5f7cce8e1507c3eb330957c4a7d311f0fc84c502328e1f6e2c42c1
MD5 d1619ed7670721e351dd6025e749e2f0
SHA1 0609b44f392556be7c8d2b5601a93320c35eadf4
SHA512 744b32707e8ea06cabe8eba2957f5f0eaf71cce45165881bfed059c41db0c9fb8fe456c85a13f0c2610ae2bb1f6e86f158374c536f6d35a35a3e47b8538c1fff
SSDEEP 3072:9WJtK2m+hs7aiIoMnR43ZzQzg9YUSd2j52kj:khddoM+3Yg9YUgN8
TLSH
T17704F963B9406612E52309705E776DB8661A3E758501CE0BA2877F092FF1D83ECE672F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	03706b9fba5f7cce8e1507c3eb330957c4a7d311f0fc84c502328e1f6e2c42c1.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
884	03706b9fba5f7cce8e1507c3eb330957c4a7d311f0fc84c502328e1f6e2c42c1.exe

C:\Users\Admin\AppData\Local\Temp\03706b9fba5f7cce8e1507c3eb330957c4a7d311f0fc84c502328e1f6e2c42c1.exe
"C:\Users\Admin\AppData\Local\Temp\03706b9fba5f7cce8e1507c3eb330957c4a7d311f0fc84c502328e1f6e2c42c1.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:884

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads