920bbb08abbb3b33b31b1d50239a1df51bdb10bdd01bda08fa6ccdc9d1ac7ce4

Analysis

max time kernel
149s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/07/2026, 11:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
920bbb08abbb3b33b31b1d50239a1df51bdb10bdd01bda08fa6ccdc9d1ac7ce4.exe
Size 2.7MB
Sample260716-ntfs3afy21
SHA256 920bbb08abbb3b33b31b1d50239a1df51bdb10bdd01bda08fa6ccdc9d1ac7ce4
MD5 5231e3006ad17740dc33db0dacde9f28
SHA1 a8af599d8196979e7a88e3c3a486f2e123be8bc8
SHA512 83cdeb3e0e22dc3b885a20a7e5a7f5f5c8bf93c0d53a664e1ca37ef6008a9c83e6cc5f5c7096787ffe94722d6112b894214adc671a89ea1704af8a45e7e77abc
SSDEEP 49152:gWRpIcRNCQ66+HIMzgapqS8aiDpaZtFvUY1CK4F2wg9Tr+gigvhiWaOuBuNXqY7k:gWRpIcX1SCDpSFvUY1gF2wUggvhiWaOC
TLSH
T1C2D56C21A3D18437E1772F769D2AD6D4582A7E301E74880F3EF87A4C5F39B41A9253A3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	920bbb08abbb3b33b31b1d50239a1df51bdb10bdd01bda08fa6ccdc9d1ac7ce4.exe

C:\Users\Admin\AppData\Local\Temp\920bbb08abbb3b33b31b1d50239a1df51bdb10bdd01bda08fa6ccdc9d1ac7ce4.exe
"C:\Users\Admin\AppData\Local\Temp\920bbb08abbb3b33b31b1d50239a1df51bdb10bdd01bda08fa6ccdc9d1ac7ce4.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3916

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3916-0-0x0000000000400000-0x00000000006B4000-memory.dmp

Download