75a6b8c1fcaf0ebd3527880b34c2adec944ad218feaca82f844c06070249ae37

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/11/2026, 16:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
75a6b8c1fcaf0ebd3527880b34c2adec944ad218feaca82f844c06070249ae37.dll
Size 71KB
Sample261107-tyflrafd45
SHA256 75a6b8c1fcaf0ebd3527880b34c2adec944ad218feaca82f844c06070249ae37
MD5 6acab88a7405355485d36eed56823280
SHA1 6480513611d07fa3c174c6b1302becb6446f6b08
SHA512 50fa781aaebd04683f704d633631362e2f1f398e63a3d133dc88d718cc2ba943584ad28d217aea43b1f575c7494bed318e944e07a703cd8b8cf6ccca2291d70e
SSDEEP 768:IIVBil9T/UouwLYj2VXJ/2mBheqTYbodnIuY6gR7hz:viPT/UouwLYj2VX12muUS7hz
TLSH
T1386385D4A7F51492FA73537E54BB9371633DFBA08AA28B078A04B55A1D23AD07CD1323
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 912 wrote to memory of 3124	912	rundll32.exe	89

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\75a6b8c1fcaf0ebd3527880b34c2adec944ad218feaca82f844c06070249ae37.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:912
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\75a6b8c1fcaf0ebd3527880b34c2adec944ad218feaca82f844c06070249ae37.dll,#1
  2⤵
  - System Location Discovery: System Language Discovery
  PID:3124

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads