33b8f8f0fb7dad3b217321c7137cb7a5d1de3a522fde4c3f929e006caf275711

Analysis

max time kernel
149s
max time network
157s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
01/06/2026, 13:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
求生之路2联机补丁.exe
Size 4.4MB
Sample260601-qf89kaft3m
SHA256 33b8f8f0fb7dad3b217321c7137cb7a5d1de3a522fde4c3f929e006caf275711
MD5 29ae365993d39c5c011fa2755e6c052e
SHA1 dc18aa3402657b03a813da57221e0a165e3cb032
SHA512 c37cda862dbd1cfb115c8069b532785b2befddee3d00d2d3fdaac0ca32c2700dbc77084097234fc4586558d6d43331667b315b5dadd72304c6ebc0bdb47697f9
SSDEEP 98304:+rEuQWkzdq0RveAS2OxcatuaFCr2yWllzDPqZcwsj2fO0:BzZRzOGQua0EPzCcF2fO0
TLSH
T18026330276C2D8B2D55208371F2EB721A23D7E246B55CFEB73E0591EEE200D1EB35665
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	求生之路2联机补丁.exe

C:\Users\Admin\AppData\Local\Temp\求生之路2联机补丁.exe
"C:\Users\Admin\AppData\Local\Temp\求生之路2联机补丁.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:5604

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads