fc7beeae6b795561f216733b82611c8db1643cc883ded6fbca9c447c7a985358

Analysis

max time kernel
149s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/06/2026, 23:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
tmppbxhuecv.exe
Size 483KB
Sample260601-2211vsat3k
SHA256 fc7beeae6b795561f216733b82611c8db1643cc883ded6fbca9c447c7a985358
MD5 0a5ef4ce865711c55bbd9e3ba61bcd4f
SHA1 af23d89a402faaf366a0374a24dcd5844b386d62
SHA512 f79a23f44518c1fb363264fa5bde787ba44d80bff1af7464f2f515ef9b45aa4774f13ae4dc5440fa15918db3c9224183a1b12d2731059dec1f2b85640f0f8030
SSDEEP 12288:W5k+Yqaxrh3Nln+N52fIA4jbsvZzFVA4:gY9xrh3NDfIA4jOZx
TLSH
T1B3B49E01BAD2C072D97514300D3AF776EAB8BD201835497B73DA1D5BFE31190A72AAB7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	tmppbxhuecv.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4180	tmppbxhuecv.exe

C:\Users\Admin\AppData\Local\Temp\tmppbxhuecv.exe
"C:\Users\Admin\AppData\Local\Temp\tmppbxhuecv.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4180

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

ops.dat

Path C:\ProgramData\windir\ops.dat
Size 144B
SHA256 e83ea9efc4ac9ede87fd8738bc3e6ca2eee36413ba5cde367667369e4d2dc893
MD5 33d41ad667138429e5d97021427089f6
SHA1 9bdc1736a228efc245829c3b715026a64f23ed39
SHA512 9df2cbcdb3b2be14c4bcdeb1412acb48452bb9af978e9e7365a6343b426e601db7f716711b3133f6bb1f4fd3200d27594168cd829b58e519b5d623faf9a2137f
TLSH
T11CC02BC26483DB2CE63F83DAFE0E28C4461D34AF56CC852E80473580004DEC2126ABFC
MD5 SHA1 SHA512 TLSH

Submit Download