64727213464954de699142fc8c617f832041d2f200d7afd56519f2d0fa4afe39

Analysis

max time kernel
149s
max time network
93s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
02/05/2026, 04:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
EduFuckerCRAX.PRO.exe
Size 482KB
Sample260502-e2pw9sg15t
SHA256 64727213464954de699142fc8c617f832041d2f200d7afd56519f2d0fa4afe39
MD5 fecc938934fa6b926b480f02ddc6241a
SHA1 85e9a6566f74aa9329f68ffd944adb4f78f8d74e
SHA512 aead9552e070baabbd46d4dc31e47924c8dea9c08f5065849ba8ba906eb55e006dfe77daaee072115e7e4bc2efa2ade8c356acea9fd0ead30427c6439394ee32
SSDEEP 6144:x/pUOZSwnb3UvjCOducFnDq8zOgyVrB7qTGxFPQ6H21SyA8n7Tcnts/3dbCCgw+K:UsNna+cFnD5IOGxx9RyAA2omknsZ7o
TLSH
T182B49E153A608873C662137D08F0FB74973C5BE4BB65CBC79BA0CE6BBE60AC42D61549
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	EduFuckerCRAX.PRO.exe

C:\Users\Admin\AppData\Local\Temp\EduFuckerCRAX.PRO.exe
"C:\Users\Admin\AppData\Local\Temp\EduFuckerCRAX.PRO.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:5080

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads