a8ae93746d6f8139b4ac1c94a53dfc01ce2cf87bd12209439349c702c5278d8f

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/07/2026, 04:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a8ae93746d6f8139b4ac1c94a53dfc01ce2cf87bd12209439349c702c5278d8f.exe
Size 212KB
Sample260703-fd2rlabv7v
SHA256 a8ae93746d6f8139b4ac1c94a53dfc01ce2cf87bd12209439349c702c5278d8f
MD5 6ce49d791552613e2b7d429a39beff65
SHA1 5737fa1ac5f09acb441b49ad95c02a8d47ca34dd
SHA512 4c156f4b2da9d7786852d9f486022ee001ebdc6f73f53f03db77eaec889e66a13043571655c9bb06239dc2b6d9e3d1548387255733037d4465804f205228ba9a
SSDEEP 3072:W/mFAPpwHRzZLYxbrpMAzWomxMOwShX1c/oiEh0z6L:WmGCLYVSsQiEKeL
TLSH
T1EC24704166E90501FAB73F3559B68214CB3ABD92AC74CE0E019861191ABFED0DEB1F37
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	a8ae93746d6f8139b4ac1c94a53dfc01ce2cf87bd12209439349c702c5278d8f.exe

C:\Users\Admin\AppData\Local\Temp\a8ae93746d6f8139b4ac1c94a53dfc01ce2cf87bd12209439349c702c5278d8f.exe
"C:\Users\Admin\AppData\Local\Temp\a8ae93746d6f8139b4ac1c94a53dfc01ce2cf87bd12209439349c702c5278d8f.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:464

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/464-0-0x0000000000520000-0x0000000000550000-memory.dmp

Download