0b182848cc93a7b90e26a0d1846a1d4639f0116ea13bbe90c5c7b239895fb18f

Analysis

user interaction
yes
max time kernel
34s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/07/2026, 22:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
generic.keygen.exe
Size 5KB
Sample260720-2k2aash12z
SHA256 0b182848cc93a7b90e26a0d1846a1d4639f0116ea13bbe90c5c7b239895fb18f
MD5 ce7aff41b893a07cb610151d4f732002
SHA1 d5655dcc3b292b12980fabe71bf9653b68ce17c4
SHA512 c07009e1f9bae9cbc8a4309ca49eb171b0f2633459c1eb59734927cbeadd4af49fae639051cdf5f55c9813bd12c139c55a2c6e890f2b1fd97173914d3b320943
SSDEEP 48:68Dcn5z+lGiXNevej5LRApI8V6FX96tRBDWXU/bin7+7BW:tAn5z+l5NGej4D6FX967Mk/eC7B
TLSH
T1AAB1B92FB694CCF2C1E4157345A7CAE19EAEDD900B2181CF0B531DA96170DE7EB38240
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	generic.keygen.exe

C:\Users\Admin\AppData\Local\Temp\generic.keygen.exe
"C:\Users\Admin\AppData\Local\Temp\generic.keygen.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3860

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads