268dfc383da2e99f6b593de937f95fa6132bfb6e877d7e3fe37b3b73f555f5b3

Analysis

max time kernel
149s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/06/2026, 14:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
tmpqmwq_cu5.exe
Size 8KB
Sample260601-samjqagt6s
SHA256 268dfc383da2e99f6b593de937f95fa6132bfb6e877d7e3fe37b3b73f555f5b3
MD5 8ab2b3491cfa7da84dbdbf2e1af7f703
SHA1 c19d0715d0d37816705fb6cccfd9ba5c76107895
SHA512 ed97ed0e697f88257cc8b0c9eb197f15300fe964ca30c134a7cbabcdd82de819382a4d00c804681fe5599fa6b1bd857cf31d7d08c5297012d8b08141541cb1d7
SSDEEP 192:/T0Fa5tXwBbY4OfI1Uhn0cbjfAxWiw7zs9CDRs2NmK:/T04t/Lhn/fviw7I9Cts
TLSH
T16BF14B431D9054BBE58AD43EC2A2252FA9F79F2913F73C438AA168C659403B0F12A963
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	tmpqmwq_cu5.exe

C:\Users\Admin\AppData\Local\Temp\tmpqmwq_cu5.exe
"C:\Users\Admin\AppData\Local\Temp\tmpqmwq_cu5.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4296

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads