e16a3e7bea60ab2aa1e49e31199791648c58b14d1691935f25f3bd4e94f2f34b

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
14/04/2026, 04:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
md5-1.exe
Size 7KB
Sample260414-e7r9ksb18n
SHA256 e16a3e7bea60ab2aa1e49e31199791648c58b14d1691935f25f3bd4e94f2f34b
MD5 665ff1dd581f97b33af9b7fb9f695912
SHA1 ec762b486a048e1ec88a04e07f107499cfac2c92
SHA512 63ff81533b5089672e83ea740b77739bbd0594f3a6f98df30a6983f724d4bd4132db468457bb6368e629ed4083018e3860ddbdeed1708b45c425060fd4596b4f
SSDEEP 24:eWpTD7ncAWq4Uz75TN4+8t1XDsc1+/qxB/qVsHBoGGmHBoG8:5TD7+mJNt8HXDsqrguBoMBoj
TLSH
T188E1214B5B054D32D44E2B358897264BFADB1B7017F34160E744A80F3B72A95A73DF14
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	md5-1.exe

C:\Users\Admin\AppData\Local\Temp\md5-1.exe
"C:\Users\Admin\AppData\Local\Temp\md5-1.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2820

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2820-0-0x0000000004000000-0x0000000004003200-memory.dmp

Download