3e3a4104bad9a0c270ed5cbe8abb986de9afaf0281a98998bdbdc8eaab85c3b6

Analysis

max time kernel
298s
max time network
326s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
17/05/2026, 13:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
resurse/dotnetfx35.exe
Size 197.1MB
Sample260517-qs8tkacw7q
SHA256 3e3a4104bad9a0c270ed5cbe8abb986de9afaf0281a98998bdbdc8eaab85c3b6
MD5 d1b341c1bc8b96e4898450c9881b1425
SHA1 0a271bb44531aadef902829f98dfad66e4a57586
SHA512 6138cc7fefe7529d4b674f9b1963e529e13d59ea52b1b860b71c8f9d7dec5fd55a1826c8bce3414002925ea33c3aeda061f347730ee5d2ec7c699e5bacab0de3
SSDEEP 6291456:ocLDZ5/5MIUx8uVIQQxbRmm/9JAmFvxoYf:HL/+IUiuVIQQN4I9JnFvyE
TLSH
T135A833FB50F85F78D19CE238D671714EA43499B2980960F7FC7AF7A00C8B5C7066869A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	dotnetfx35.exe

C:\Users\Admin\AppData\Local\Temp\resurse\dotnetfx35.exe
"C:\Users\Admin\AppData\Local\Temp\resurse\dotnetfx35.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4160

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads