Analysis
- max time kernel
149s - max time network
150s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
- submitted
20/04/2026, 03:38
General
- Target 0210cd19c6c1ff0359666438eaae4cc848bc507eea89266c09a009a6c404afd7.exe
- Size 198KB
- Sample260420-d66vxags2m
- SHA256 0210cd19c6c1ff0359666438eaae4cc848bc507eea89266c09a009a6c404afd7
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0210cd19c6c1ff0359666438eaae4cc848bc507eea89266c09a009a6c404afd7.exe"C:\Users\Admin\AppData\Local\Temp\0210cd19c6c1ff0359666438eaae4cc848bc507eea89266c09a009a6c404afd7.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3028-0-0x0000000000020000-0x0000000000056000-memory.dmp
memory/3028-1-0x0000000005110000-0x00000000056B6000-memory.dmp
memory/3028-2-0x0000000004A90000-0x0000000004B22000-memory.dmp
memory/3028-3-0x0000000004CE0000-0x0000000004CF0000-memory.dmp
memory/3028-4-0x0000000004B40000-0x0000000004B4A000-memory.dmp
memory/3028-5-0x0000000004CE0000-0x0000000004CF0000-memory.dmp
memory/3028-7-0x0000000004CE0000-0x0000000004CF0000-memory.dmp
memory/3028-6-0x00000000009F0000-0x0000000000ACF000-memory.dmp
memory/3028-8-0x0000000004CE0000-0x0000000004CF0000-memory.dmp