a7cfd6174f3555cbd217130eae0477a410a6cef21426ebf11f2d45796b9d9f47

Analysis

max time kernel
148s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/11/2026, 14:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Loader.exe
Size 47KB
Sample261107-rwtpgsfb74
SHA256 a7cfd6174f3555cbd217130eae0477a410a6cef21426ebf11f2d45796b9d9f47
MD5 3cc7b2ee8504fa2e9ee3333c03cd1bc6
SHA1 6183e4d77f729674a0749837da3ff7abc07c1dd9
SHA512 3aec1058670d1a5d89bb67e05284197c4bec19fa88cdf91800f7a9cbb15d8ebdd395d6874eafcff0ffcfdfb29f66e7cbca4d5f782daa44cbf7ef2345c5316dd4
SSDEEP 768:4yv16CES58Ed2MLQ2WNGbCgUj+RcF7kjerG:4yvqS5lQ2MGbCgI+bjy
TLSH
T1E223E622EDABD137D3494DB0D9135E16CE73ECA68FE0B5C7A7805DE208146D0AB7A306
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Loader.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4888	Loader.exe

C:\Users\Admin\AppData\Local\Temp\Loader.exe
"C:\Users\Admin\AppData\Local\Temp\Loader.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
PID:4888

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads