a4efc4166c4e29cfd8333aed971854013364849e462673cc300735a8402f503f

Analysis

max time kernel
148s
max time network
114s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/07/2026, 03:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
TOHEART2.exe
Size 2.3MB
Sample260712-ds7v2scv2p
SHA256 a4efc4166c4e29cfd8333aed971854013364849e462673cc300735a8402f503f
MD5 0c01bcc73059a219c5945d51fb643fa4
SHA1 92f39e2fd473c14f8f7619924ef7658a491293aa
SHA512 2ac81df1aef1de72b5f6a9d56c32e653e2c1ce1ef205190bb03117299a2ed0294313671aa9672a0990e441a850c71d93135cc0456785e326ec05086cd19a6e2d
SSDEEP 24576:yTrXcJebIxOJOXcPZfLtdbawbt7o9qqHrn2On9tr+T3dmKQPOvTOAseqt7lZClu2:I844XWZf/Bbt8mIbnuAfP/uK1
TLSH
T119B54C11E792D01BF4C210B5A6E992F5A8383731578810E3B7D45EEDB63AAD19E3072F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	TOHEART2.exe

C:\Users\Admin\AppData\Local\Temp\TOHEART2.exe
"C:\Users\Admin\AppData\Local\Temp\TOHEART2.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3284

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Sys.sav

Path C:\Users\Admin\AppData\Local\Temp\Sys.sav
Size 90KB
SHA256 804f90a196d4f028fd33c5a0a8f31f45ab247529ccde287dfa2d1ecd9bb69f03
MD5 cc7b75ce8beb53afe1c1f2c94aa33d67
SHA1 1a5680a087fe1c901fe520a1cfffd2d10575b2fc
SHA512 e8b7e05ab6f48ceaf8535cadfde3d159120954716cfb66af58a934a83c1d49332cf74fe80bfea28648542066411fe15389974a47a5e5323ebcd1146d072e127c
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download