bcf7f7e9ccb75aff176bb29b6030a9897e363e8c5f256f4623dad835cf38079e

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/05/2026, 04:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
bcf7f7e9ccb75aff176bb29b6030a9897e363e8c5f256f4623dad835cf38079e.exe
Size 579KB
Sample260509-e6n6jaax3t
SHA256 bcf7f7e9ccb75aff176bb29b6030a9897e363e8c5f256f4623dad835cf38079e
MD5 e82cbb5119bda767f0ac63a47b3d2415
SHA1 deccac5fe16920502a13d72c74853892092c4cac
SHA512 fd526873463e3c90192bdc9930fe023681351e927b3d978dd29256bf908b1d9885eeb6d957d74ff63d09b7b95d481339ebb6e210460fbb6ab1c00634c90e357f
SSDEEP 12288:61XtJ5p5ki1M5np5nlWAx0mf/U69cNR2iu1/uciDRt9rdLjNroh0o:61XfE5nlimk69gR2iu1SRt9rdf9oh0o
TLSH
T100C49F0178909033D63338B106B9D7B05D7DA8701E195ADFE39909B5AF646C1BE2EA3F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	bcf7f7e9ccb75aff176bb29b6030a9897e363e8c5f256f4623dad835cf38079e.exe

C:\Users\Admin\AppData\Local\Temp\bcf7f7e9ccb75aff176bb29b6030a9897e363e8c5f256f4623dad835cf38079e.exe
"C:\Users\Admin\AppData\Local\Temp\bcf7f7e9ccb75aff176bb29b6030a9897e363e8c5f256f4623dad835cf38079e.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4404

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4404-0-0x0000000000400000-0x00000000004BC000-memory.dmp

Download

memory/4404-1-0x0000000000400000-0x00000000004BC000-memory.dmp