15f2fbcc376f78b61f927660810f66a476b2deb378270eaeff77993c9c1b0605

Resubmissions

12/07/2026, 04:52

260712-fhvtvacz4k5

12/07/2026, 04:35

260712-e7mn4aey4w6

12/07/2026, 04:15

260712-evnevsey3t5

Analysis

max time kernel
900s
max time network
489s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/07/2026, 04:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
resources/elevate.exe
Size 115KB
Sample260712-e7mn4aey4w
SHA256 15f2fbcc376f78b61f927660810f66a476b2deb378270eaeff77993c9c1b0605
MD5 e103fbb1f1d5d0ac3d314f417f450315
SHA1 487b2f497fb8dac07d80f5889782cdf27d37b5ec
SHA512 7109365bd508e88509fecdffac5f86d37346a3d60057daafcbf7383bcc966d0bb6efbc5a299a8f9774395651a80a130455995de5a1aed54f9eddf0d33ff8249f
SSDEEP 3072:+CbLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWlMZ:NPrwRhte1XsE1lk
TLSH
T112B37C1274C0C471E9732A3559B4C9714E6DFD710E759FAB6398027A4FA02C0AA3AFB7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	elevate.exe

C:\Users\Admin\AppData\Local\Temp\resources\elevate.exe
"C:\Users\Admin\AppData\Local\Temp\resources\elevate.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2320

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads