24a9c686c70c0e71de4aa72c675e932b9ac3c96f653155d6d63be54574445110

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/11/2026, 17:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
24a9c686c70c0e71de4aa72c675e932b9ac3c96f653155d6d63be54574445110.exe
Size 2.6MB
Sample261104-v1s6astsbw
SHA256 24a9c686c70c0e71de4aa72c675e932b9ac3c96f653155d6d63be54574445110
MD5 9d364da61323659033605705b8499ec1
SHA1 10295f613bd59d51ed29f6cdd2ef29d378035c29
SHA512 09c8a0efb8c23074d8de166167acbf57ce4808dabe3fe1ce3dfc760254a5848766c51ef08e89bf174db4fb310cb13fa9161f2165a73fde82131c936fd26f4013
SSDEEP 49152:DG50a9Dw5XDmGemS93XTXnsQGM9RAhobTYrRgvhiWaOuBuNXqY7RC0W7xwKEph:DG50a9DwlD9S93DXPGM3AhrRgvhiWaO7
TLSH
T140C56B21A3D18437D5732E7A9C2AD6D4582A7E701E74884F3FE87E4C5F39B816928393
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	24a9c686c70c0e71de4aa72c675e932b9ac3c96f653155d6d63be54574445110.exe

C:\Users\Admin\AppData\Local\Temp\24a9c686c70c0e71de4aa72c675e932b9ac3c96f653155d6d63be54574445110.exe
"C:\Users\Admin\AppData\Local\Temp\24a9c686c70c0e71de4aa72c675e932b9ac3c96f653155d6d63be54574445110.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4988

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4988-0-0x0000000000400000-0x000000000069A000-memory.dmp

Download