8fd831c5bb24ee51f65699da378f127044314e7184042e44646b40c507d09bb4

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/06/2026, 01:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ChipGenius_v4_21_0701/ChipGenius_v4_21_0701.exe
Size 299KB
Sample260603-b44awsf16v
SHA256 8fd831c5bb24ee51f65699da378f127044314e7184042e44646b40c507d09bb4
MD5 c225785c18c5ec684ea5a10fb3d56cc3
SHA1 05e12f3ec7cf52f915a974213b8aa3d7f3ffe28d
SHA512 fbdbc67c8ab522ed940c4fe448587f3000b2754443c0d504b25203858c97442ac80795fa9005e889ad2bd6610a73449eb1dd29331bfb14b7d28333c8f6ab1c36
SSDEEP 6144:UQePa/g7rQGDa3e79hsA5XhXo9jBCSxCFLMboS5POG:UQIA6vr5XuVXCdqoS
TLSH
T105540255BA85C7C4D99D11B68DF2FA4C0E58FFA46A83415738E037AF96B9B03B084E60
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ChipGenius_v4_21_0701.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
632	ChipGenius_v4_21_0701.exe

C:\Users\Admin\AppData\Local\Temp\ChipGenius_v4_21_0701\ChipGenius_v4_21_0701.exe
"C:\Users\Admin\AppData\Local\Temp\ChipGenius_v4_21_0701\ChipGenius_v4_21_0701.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:632

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/632-0-0x0000000000400000-0x000000000051F000-memory.dmp

Download

memory/632-3-0x0000000000400000-0x000000000051F000-memory.dmp