16a31bc1cda3956c3ab1a15f5c332c379be3d8c09468e956895dceffcd2d85a6

Resubmissions

01/08/2026, 03:41

260801-d8xp1svyex9

01/08/2026, 03:37

260801-d6tkksdp4v7

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/08/2026, 03:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ref/win-x86/idevicerestore.exe
Size 175KB
Sample260801-d6tkksdp4v
SHA256 16a31bc1cda3956c3ab1a15f5c332c379be3d8c09468e956895dceffcd2d85a6
MD5 2acff3576495ee9709d724e87c312237
SHA1 7a5fcd2a385219d20f160f5e0481f8fd413ee970
SHA512 515a62412d278cbef04f8d8576803aa526a29f57ae801ff84c008c696badbe6f269a05f1204bdecdc570416a6702a67a043db315657d08a476de2636bda3fa45
SSDEEP 3072:kbE1eRwFkL4JzjOLy31xslvnIp0UMkRPbvvObUtdj4flw3hnzqpnciP6BCGyhNi+:kb0esl9ie37wvIp0UfRDvvObUtdj4flR
TLSH
T1C4042A30A1C1A172F6A303F039445BB3FD65D434472227DFED9C4DE9925A8E429EDE2A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	idevicerestore.exe

C:\Users\Admin\AppData\Local\Temp\ref\win-x86\idevicerestore.exe
"C:\Users\Admin\AppData\Local\Temp\ref\win-x86\idevicerestore.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3668

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads