e4e9d56f2b714b4194e23446bced79a29018b15e5832424f51fbfce718eb49b6

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/05/2026, 12:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
setup.exe
Size 537KB
Sample260510-pg7lpaa19n
SHA256 e4e9d56f2b714b4194e23446bced79a29018b15e5832424f51fbfce718eb49b6
MD5 18b69de00d1b3e749b0c1f8ddcbea71c
SHA1 3ad299a40c5679b9865f402e6869dc6a7eee64af
SHA512 5d2fa8cb5207f10da63e7d651fd88f41b2ef6cd8c986c7c22e737c8adae3255644827dd8d3e6321e4a9657efc97b0c3316c8f61ca2d6cee084bdbab2e62c64bf
SSDEEP 12288:z7DnfAuCL5CZ7HUqQ5G6QepUn0Kh0oeMb01JQntLOCTMfAgD:z7DfAN5CpJJ6tGnQoemTiAs
TLSH
T1B4C4E41366D8BCB8E17216706B7797E1977EFC201B30C58F22C0155DAA7C9C2BA31B96
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	setup.exe

C:\Users\Admin\AppData\Local\Temp\setup.exe
"C:\Users\Admin\AppData\Local\Temp\setup.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4328

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4328-0-0x0000000002360000-0x0000000002379000-memory.dmp

Download

memory/4328-4-0x0000000002360000-0x0000000002379000-memory.dmp