dc5ac8d4d6d5b230ab73415c80439b4da77da1cfde18214ef601897f661abdac

Analysis

max time kernel
870s
max time network
435s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/05/2026, 21:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
AppLaunch.exe
Size 101KB
Sample260507-1rl9aaa19v
SHA256 dc5ac8d4d6d5b230ab73415c80439b4da77da1cfde18214ef601897f661abdac
MD5 89d41e1cf478a3d3c2c701a27a5692b2
SHA1 691e20583ef80cb9a2fd3258560e7f02481d12fd
SHA512 5c9658f6ca0d8d067bfc76072c438ac13daa12d8c1fef33369e1bc36a592d160a2bdb22b4f3eed73e8670bb65107a4134e18e6dc604897a80cc0768769f475dc
SSDEEP 1536:+BsZRVSXlyeg2JfVNUWWxvhKzIo0MYJuhkHyXBWge:+BsZGXMejUkzIo0MYJuhdR4
TLSH
T1D8A31A937BD5C462D42219B0C8E4E7FA646EFD355F700497A2847F1F3C216C25A38AEA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	AppLaunch.exe

C:\Users\Admin\AppData\Local\Temp\AppLaunch.exe
"C:\Users\Admin\AppData\Local\Temp\AppLaunch.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:748

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads