Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    29/07/2026, 10:18

General

  • Target
    PrintMQClient(202106)/MQPrintClientService.exe
  • Size 11KB
  • Sample260729-mcap2sdr7w
  • SHA256 bd368f4363b9aebe53eceec550cd6433469df92a1e38b37b6afbf25f869bfefe
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\PrintMQClient(202106)\MQPrintClientService.exe
    "C:\Users\Admin\AppData\Local\Temp\PrintMQClient(202106)\MQPrintClientService.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:4956

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/4956-0-0x00000000002C0000-0x00000000002CA000-memory.dmp

        memory/4956-1-0x0000000002450000-0x0000000002472000-memory.dmp

        memory/4956-2-0x0000000004BD0000-0x0000000004C6C000-memory.dmp

        memory/4956-3-0x0000000002480000-0x000000000249A000-memory.dmp

        memory/4956-4-0x0000000005540000-0x0000000005AE4000-memory.dmp

        memory/4956-5-0x0000000004D10000-0x0000000004DA2000-memory.dmp

        memory/4956-6-0x0000000004E40000-0x0000000004E50000-memory.dmp