702c391f2099b9087e122cdf29eaf7f9504d7e3a111b1a2979f421d7482fe62f

Analysis

max time kernel
148s
max time network
92s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
23/04/2026, 00:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
702c391f2099b9087e122cdf29eaf7f9504d7e3a111b1a2979f421d7482fe62f.exe
Size 2.0MB
Sample260423-ake9aaes91
SHA256 702c391f2099b9087e122cdf29eaf7f9504d7e3a111b1a2979f421d7482fe62f
MD5 67fe81f6a78477af57a82dbb832efbf3
SHA1 54fd831c747dcf738386c20d957cbe42eb52d2f1
SHA512 3a2d544f569d67b6f93cd5b53e5f4b75565be47923686abb216c0a3701cf1d3427a4cf9d702a5c18ef7e791667d4e41b51656ecfab9cc7d8451f946e49e56b59
SSDEEP 49152:4dhFzsCVXVoPFhkEWKmHgfh/wRRzbyxsZzZ85RzmoML4hTePjpi:ChFzsCVXVoPHkEkHgfh/wRRzbmQZoFmX
TLSH
T1BDA58E2275E15077C5730B328A4CB725A2AD7E705635064B27D46F7E3EF0883AA2CE67
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	702c391f2099b9087e122cdf29eaf7f9504d7e3a111b1a2979f421d7482fe62f.exe

Suspicious use of SetWindowsHookEx 18 IoCs

pid	Process
2400	702c391f2099b9087e122cdf29eaf7f9504d7e3a111b1a2979f421d7482fe62f.exe
2400	702c391f2099b9087e122cdf29eaf7f9504d7e3a111b1a2979f421d7482fe62f.exe
2400	702c391f2099b9087e122cdf29eaf7f9504d7e3a111b1a2979f421d7482fe62f.exe
2400	702c391f2099b9087e122cdf29eaf7f9504d7e3a111b1a2979f421d7482fe62f.exe
2400	702c391f2099b9087e122cdf29eaf7f9504d7e3a111b1a2979f421d7482fe62f.exe
2400	702c391f2099b9087e122cdf29eaf7f9504d7e3a111b1a2979f421d7482fe62f.exe
2400	702c391f2099b9087e122cdf29eaf7f9504d7e3a111b1a2979f421d7482fe62f.exe
2400	702c391f2099b9087e122cdf29eaf7f9504d7e3a111b1a2979f421d7482fe62f.exe
2400	702c391f2099b9087e122cdf29eaf7f9504d7e3a111b1a2979f421d7482fe62f.exe
2400	702c391f2099b9087e122cdf29eaf7f9504d7e3a111b1a2979f421d7482fe62f.exe
2400	702c391f2099b9087e122cdf29eaf7f9504d7e3a111b1a2979f421d7482fe62f.exe
2400	702c391f2099b9087e122cdf29eaf7f9504d7e3a111b1a2979f421d7482fe62f.exe
2400	702c391f2099b9087e122cdf29eaf7f9504d7e3a111b1a2979f421d7482fe62f.exe
2400	702c391f2099b9087e122cdf29eaf7f9504d7e3a111b1a2979f421d7482fe62f.exe
2400	702c391f2099b9087e122cdf29eaf7f9504d7e3a111b1a2979f421d7482fe62f.exe
2400	702c391f2099b9087e122cdf29eaf7f9504d7e3a111b1a2979f421d7482fe62f.exe
2400	702c391f2099b9087e122cdf29eaf7f9504d7e3a111b1a2979f421d7482fe62f.exe
2400	702c391f2099b9087e122cdf29eaf7f9504d7e3a111b1a2979f421d7482fe62f.exe

C:\Users\Admin\AppData\Local\Temp\702c391f2099b9087e122cdf29eaf7f9504d7e3a111b1a2979f421d7482fe62f.exe
"C:\Users\Admin\AppData\Local\Temp\702c391f2099b9087e122cdf29eaf7f9504d7e3a111b1a2979f421d7482fe62f.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2400

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads