3a0cbfcca48f2154423b26bfafcaf9c55061f32a7e09f0b34691c5c3a006e995

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/08/2026, 17:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
SAK_32bit/bin/hptnacp.exe
Size 2.3MB
Sample260801-vm34caea24
SHA256 3a0cbfcca48f2154423b26bfafcaf9c55061f32a7e09f0b34691c5c3a006e995
MD5 f18c9613eabe47d2bf6722c7faf5449e
SHA1 fe1c6bb5735bda2b86dc0cbe261966aea9132c56
SHA512 090d9db6f83d5d44fc38faf875699d2aa5d47fd82ffd4f2959be76597e26df3dc320d5b0ac9efadbebacf0e178a1c4c6e96298f4026204b4b4a934d4d6b1be23
SSDEEP 24576:zE6H60CTegbTmLf1CoqnFys38s6uEQRfSmr84ER7eRXovlraVuQ583h30w:HWazrR7J
TLSH
T10EB509036A8B4E75DDD23BB451CB633F9734EE30CA269B7FE609C4359A532C4681A742
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	hptnacp.exe

C:\Users\Admin\AppData\Local\Temp\SAK_32bit\bin\hptnacp.exe
"C:\Users\Admin\AppData\Local\Temp\SAK_32bit\bin\hptnacp.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1788

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1788-0-0x0000000000400000-0x000000000053A000-memory.dmp

Download