0af52a52c308682881795fbbcac771f76c4d9b454f1aa38f7516e5e04753693a

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
11/05/2026, 12:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Abril2026.exe
Size 514KB
Sample260511-pqrltsds5p
SHA256 0af52a52c308682881795fbbcac771f76c4d9b454f1aa38f7516e5e04753693a
MD5 ba9b1bad00f63c55323cb7ebbb6e6a05
SHA1 8380456e53b4d06491bfc877608c713e76795e70
SHA512 4fbbd11d5f5b82faac647dbf5d1ead87ae48e7eed229bb4f78af9bcd39a6da178a54d51307fb2eda07c4834ee88c985537ca24c1b2c5244679288f0b2174dde1
SSDEEP 12288:fg2cpfSUy6oFGNfZvCcXmw0z38qsPZ0W1:fgdfty6oFQfNwz38JZt
TLSH
T1F4B4BF01B6E2C172D57660300936E735DEBDBD2018369D7BA3DA0D57FE30290A739AB6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Abril2026.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2436	Abril2026.exe

C:\Users\Admin\AppData\Local\Temp\Abril2026.exe
"C:\Users\Admin\AppData\Local\Temp\Abril2026.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2436

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

logs.dat

Path C:\ProgramData\store\logs.dat
Size 184B
SHA256 84cead3ae4f27c91e4264bac95b81bb255b9286a364a9fd1e5632cc46ee5080e
MD5 2a08042435cd8997844a9d49ca31f609
SHA1 483eafb0be01b0112eec1b4e5477d8a20e2547ba
SHA512 85c008fa8ef2e93ae76f105a07d334a7d368ba97071d255cdd7b91438f5019e0c435991b27298549fba3acb6b961e4eb7442de7ac625db16449065034cbb84c6
TLSH
T146C0025D33E5141A78E6E25B54F3102A6A72BD971138CC0D16E6174C18FED4565407AF
MD5 SHA1 SHA512 TLSH

Submit Download