2082bf418485ed1783958be625780e09e72975e5efa200283d4f4ff5a0abfa1b

Analysis

max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
21/04/2026, 11:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2082bf418485ed1783958be625780e09e72975e5efa200283d4f4ff5a0abfa1b.exe
Size 4.0MB
Sample260421-ndvbhsgy5w
SHA256 2082bf418485ed1783958be625780e09e72975e5efa200283d4f4ff5a0abfa1b
MD5 73e401093b864dd5b642cf715254fc38
SHA1 7510840b3c30e114203ed56c2c602cd30e302cee
SHA512 8e304c0e4579c2eabfd665b35b79d1363ed963d31e707648c8fe87dbfc2f133ab08ca29255116482d83bd318b54a09945207e3d0da32753b1237289bb329adba
SSDEEP 98304:WWIQAQY0PqSZHG1e91zph/99eGrcjqXj1P48eXw8sGel:IqbSSlUap/GGrcGj6MGel
TLSH
T1B8163353F2C539F1C5221C775E516730B6BD7C60CA325AE7B3D8279DAA211E08234BEA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2082bf418485ed1783958be625780e09e72975e5efa200283d4f4ff5a0abfa1b.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2496	2082bf418485ed1783958be625780e09e72975e5efa200283d4f4ff5a0abfa1b.exe
2496	2082bf418485ed1783958be625780e09e72975e5efa200283d4f4ff5a0abfa1b.exe

C:\Users\Admin\AppData\Local\Temp\2082bf418485ed1783958be625780e09e72975e5efa200283d4f4ff5a0abfa1b.exe
"C:\Users\Admin\AppData\Local\Temp\2082bf418485ed1783958be625780e09e72975e5efa200283d4f4ff5a0abfa1b.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2496

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads