2c54a3bd0fd1c7e258dc73d184de932beb4e2854a1132aa83f6604ce3fb191c1

Analysis

max time kernel
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
31/05/2026, 16:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2c54a3bd0fd1c7e258dc73d184de932beb4e2854a1132aa83f6604ce3fb191c1.exe
Size 4.7MB
Sample260531-vfpmdaft5p
SHA256 2c54a3bd0fd1c7e258dc73d184de932beb4e2854a1132aa83f6604ce3fb191c1
MD5 0913c2c4327ec15d919ff208c36aa95b
SHA1 6d73eabb4f18da4c8b5a24bda8fddb9d12947e63
SHA512 bcbf743576359c6a2b02764e8a3014e5e44bd0693d63338ac2d9fd9d1c1ab6582de5a5ec9f445dd01ddb3c55066b46bb5cd7ca20000b76d4cb51192ae43b954c
SSDEEP 98304:Wg4iRXV+73K786UP46FWbC97xhGaiK5AJY7VtIjBZZcLFhgaG7AN:TXVx786UPxFh97rl95gY7kXZcLxN
TLSH
T1E1363381AF85BC71C03100312A6AE67E6EFF7D204E5686CB5BD3BEDD9A304829D35761
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2c54a3bd0fd1c7e258dc73d184de932beb4e2854a1132aa83f6604ce3fb191c1.exe

C:\Users\Admin\AppData\Local\Temp\2c54a3bd0fd1c7e258dc73d184de932beb4e2854a1132aa83f6604ce3fb191c1.exe
"C:\Users\Admin\AppData\Local\Temp\2c54a3bd0fd1c7e258dc73d184de932beb4e2854a1132aa83f6604ce3fb191c1.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1028

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads