2aaced4e332d1a0c6d495b1d6f9a0cf0c7c61c273465931fe2e39140599e4673

Analysis

max time kernel
149s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
14/07/2026, 23:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2aaced4e332d1a0c6d495b1d6f9a0cf0c7c61c273465931fe2e39140599e4673.exe
Size 1.2MB
Sample260714-28c8dafs8m
SHA256 2aaced4e332d1a0c6d495b1d6f9a0cf0c7c61c273465931fe2e39140599e4673
MD5 f6c9ed7a98f9a58ff468d59ae15f8a56
SHA1 54754430b5a00b985b0c88648aa043b9785caaf8
SHA512 2a345d0fa442d22d7c1fbbf03e169be4c9272221163e43099d9c1899d7c3340c3463a5f349733ebd107013aee3bd23bf372f5f4b644b0b3b51c848ff96856858
SSDEEP 24576:uqYJmyOHv+MYsl9Pmbv72Hx0xQ/lII6m1xw5a0/YD:bYJEP+sHPmbv72ROQ/l6mnw5a0wD
TLSH
T10645491133E5813AF6B20B306D7CA7A4567ABC711F3285CF63986A5D1A30AD19B31B37
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	2aaced4e332d1a0c6d495b1d6f9a0cf0c7c61c273465931fe2e39140599e4673.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2aaced4e332d1a0c6d495b1d6f9a0cf0c7c61c273465931fe2e39140599e4673.exe

C:\Users\Admin\AppData\Local\Temp\2aaced4e332d1a0c6d495b1d6f9a0cf0c7c61c273465931fe2e39140599e4673.exe
"C:\Users\Admin\AppData\Local\Temp\2aaced4e332d1a0c6d495b1d6f9a0cf0c7c61c273465931fe2e39140599e4673.exe"
1⤵
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:1568

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1568-0-0x0000000000600000-0x000000000073D000-memory.dmp

Download