91d30d1a253ca3b359985b6045bc1a3cf4763a845251a5719784077f7bb5a814

Analysis

max time kernel
149s
max time network
157s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
08/04/2026, 00:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
BIN/Showpriv.exe
Size 18KB
Sample260408-ap29lsgs41
SHA256 91d30d1a253ca3b359985b6045bc1a3cf4763a845251a5719784077f7bb5a814
MD5 3a4f503228987f9879ef7f9ba7ffb694
SHA1 e2228350b8c6f3347678535c6a76e15dca683a92
SHA512 023999827f95c2fcf822009c1743a8ebfed6ea9d936dbd41cec367d026f8cc1906d340cbf2477b5061116b3b49c92f5bbf620e7a5cb767ed0d407509d2a2c4c8
SSDEEP 384:WwE6ur3iEvPnYXsD/OOK3U2xJg6WJzWCCD/HRN7Ps4lGsqAxayS:YYEf6DvU5l
TLSH
T1438209D287FC051AF8E71AF05AB8D1172C3C7ED71F1182AF0566A15D39927E09A3832B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Showpriv.exe

C:\Users\Admin\AppData\Local\Temp\BIN\Showpriv.exe
"C:\Users\Admin\AppData\Local\Temp\BIN\Showpriv.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:672

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads