7e1edb915222ec69e8938c90cb6acef3925c1ab9632da743180137138eb766c5

Analysis

max time kernel
149s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/08/2026, 09:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
7e1edb915222ec69e8938c90cb6acef3925c1ab9632da743180137138eb766c5.exe
Size 3.3MB
Sample260802-lxaecagl21
SHA256 7e1edb915222ec69e8938c90cb6acef3925c1ab9632da743180137138eb766c5
MD5 f512f50a6c3ac5be63aed0465c8a44a9
SHA1 53a09b378b505020b271f058668bfae313185a56
SHA512 1ddd2526a69e699c8670f9dc02f67dc5c3512eb0c92b6018f60460f135db88c3d1883f71403ecba7f7060cd58a7903770b9883489be6ba386dd08239f7546c5a
SSDEEP 49152:QuAKxvISKItheRQSJ3MhjxImhEzAW308A3oWtKFz0ool5+UKLi333sH:QuAK64MmhKAWHooWJb333W
TLSH
T19EF55D23F34D603FF06A1A399D379658983F76606516CC5797FC3A8C8F361802E2A65B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	7e1edb915222ec69e8938c90cb6acef3925c1ab9632da743180137138eb766c5.exe

C:\Users\Admin\AppData\Local\Temp\7e1edb915222ec69e8938c90cb6acef3925c1ab9632da743180137138eb766c5.exe
"C:\Users\Admin\AppData\Local\Temp\7e1edb915222ec69e8938c90cb6acef3925c1ab9632da743180137138eb766c5.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2852

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2852-0-0x0000000001640000-0x0000000001641000-memory.dmp

Download

memory/2852-1-0x00000000008E0000-0x0000000000C3F000-memory.dmp