075b10849dc663d205b82758068f5ec43f26b902daf25b0fb80c953554b05c75

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/07/2026, 04:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
075b10849dc663d205b82758068f5ec43f26b902daf25b0fb80c953554b05c75.exe
Size 966KB
Sample260706-e4m6fshx9v
SHA256 075b10849dc663d205b82758068f5ec43f26b902daf25b0fb80c953554b05c75
MD5 3ffb74c26c8e656c7121d48297adb574
SHA1 9818f8244aafa67ba427a72d9e7b8961d2ac9545
SHA512 e9f3fe220970a31b47ef07e4bc16aa5be3fe7be7bdafa0779baeaf641ae62212464d37217c2a272d0785e927d5f9ca520a6421fc02d7715f9473ed4cc11d3051
SSDEEP 12288:ueT47NrTfGODvVOe2zUfIBCSqi2zdlA/cYHiJ1hkdgsswM/C02ApwPgmRVf2D/Yy:ROrT+w3MqnSEvA0wmCt18FsSkjA4
TLSH
T1C025233A62C8CBB4DE90D83E44047AFF608DF454806656E9D57FFB42783CA75479A823
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/1352-0-0x0000000000400000-0x0000000000A09000-memory.dmp	upx
behavioral1/memory/1352-2-0x0000000000400000-0x0000000000A09000-memory.dmp	upx

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	075b10849dc663d205b82758068f5ec43f26b902daf25b0fb80c953554b05c75.exe

C:\Users\Admin\AppData\Local\Temp\075b10849dc663d205b82758068f5ec43f26b902daf25b0fb80c953554b05c75.exe
"C:\Users\Admin\AppData\Local\Temp\075b10849dc663d205b82758068f5ec43f26b902daf25b0fb80c953554b05c75.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1352

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1352-0-0x0000000000400000-0x0000000000A09000-memory.dmp

Download

memory/1352-2-0x0000000000400000-0x0000000000A09000-memory.dmp