22daf04dfaefd3a1c1134decb04ab5130cb99ab7cb681100a203b954d4933540

Analysis

max time kernel
149s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
24/05/2026, 15:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
tmpxyxypxrs.exe
Size 10KB
Sample260524-s66bpsc12s
SHA256 22daf04dfaefd3a1c1134decb04ab5130cb99ab7cb681100a203b954d4933540
MD5 2f17f2733d20ac629ce5ddfb262847fb
SHA1 74c5b82d28f9acf8ddf673a7bfdb0a5a77bd81f4
SHA512 d5f4678642121e0d1ec89098d848bd9452c46be286e62789c9f27db6270617af050272e4e1f80691cde8bbfcb5d7b2156c76e526aaebe0115132cb3937571724
SSDEEP 192:5piF7hWH0iI8jKWE2uNB+PEwtDtfg28bpfSbxNPDt:KNh8q8joRmPEiv8bsbxNP
TLSH
T125224BEFAD174BA0EEB641F50277C403E9BA71154D6F8863EA142AC16D315107CAEF62
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	tmpxyxypxrs.exe

C:\Users\Admin\AppData\Local\Temp\tmpxyxypxrs.exe
"C:\Users\Admin\AppData\Local\Temp\tmpxyxypxrs.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1424

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads