db0f28d0dc0cd8e6a08fc0bb0f2f2d9e4515dea3553aec5d59ca929403f1e939

Analysis

user interaction
yes
max time kernel
149s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
11/07/2026, 21:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
SOULS.exe
Size 163KB
Sample260711-1js2vscy2v
SHA256 db0f28d0dc0cd8e6a08fc0bb0f2f2d9e4515dea3553aec5d59ca929403f1e939
MD5 0e367598033bee2660b6b6132e746f6f
SHA1 88a9b403ab485ce376a2b89fff155ccc01c62f24
SHA512 c2105cf0523e9e9e4a2bc01b080ef7a6b6ec7ff8cc0d271205aade144972fb6adbc829ccefc752008cdee5b17c0bd266d2a12447628a1593f0d884a4c0c7a539
SSDEEP 3072:SjbZ5cYys46khaS3fty2nNrfhP7B9YZOWM0Wgp8r5QuaNqLkn5ZhaRg+FXX9+r4i:SoOE7NFn0WgarWqUTNWHnE
TLSH
T160F35DE77AA98031F0B05C341E54DAB16E2FBE53462456BB52E037671B752C0ED23BA3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	SOULS.exe

C:\Users\Admin\AppData\Local\Temp\SOULS.exe
"C:\Users\Admin\AppData\Local\Temp\SOULS.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4388

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads