01c554a9a8d685c8dcfdb1b1ba9b2ad30e05855888473e57c4f815badf8765d0

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/07/2026, 14:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Installer/tools/UZ.exe
Size 80KB
Sample260709-refrascv51
SHA256 01c554a9a8d685c8dcfdb1b1ba9b2ad30e05855888473e57c4f815badf8765d0
MD5 3797b8fdce3035ccede52245b340857f
SHA1 0f4c6d2d29f947f561c9c79b33b69aff43698ee3
SHA512 586b9e27768ca92a4d76317f70bab05430fd449c3d90c1db6c8c1af0d51e567df931635d4c5e051f1244d5e17746c5a31e13454b2508589578bc929e82935d55
SSDEEP 1536:Rnp9dAiSpn4yK7JSK53NM4JhY1QBMM3Tn4:RpgiSpnS7j4WY1QBr3Tn
TLSH
T119834952BBDA45A1D46169369C3AD94B893BFD408F30C5EFB2441F4B6CA06D18D323EE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	UZ.exe

C:\Users\Admin\AppData\Local\Temp\Installer\tools\UZ.exe
"C:\Users\Admin\AppData\Local\Temp\Installer\tools\UZ.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2176

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads