0c52fc98a980588fc43819c4fc383bcc691c64c6d8b655bdd5237a3bde4c2cdf

Analysis

user interaction
yes
max time kernel
34s
max time network
36s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
04/08/2026, 02:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
tabspace.exe
Size 244KB
Sample260804-ch3mxabc53
SHA256 0c52fc98a980588fc43819c4fc383bcc691c64c6d8b655bdd5237a3bde4c2cdf
MD5 a0614b526c1f37ecaf72d378c15d7928
SHA1 6c0708fb553137b1effb89a558aa024bca15f720
SHA512 379a92ff6629f1472a6ab5cb23400bafe70193734d0da538b4d65fd6addd489d4d66cbe169d46f45a256d8c83a6d9e30b53faa0dce217e327b02c15e3f17f2e7
SSDEEP 3072:Amtpe1xarTFnIvz/v1HDQ9rh3GIyMZbKbNN6Cid/VuAg0FujT2KzVLx11zmB1820:AmaGKHp09r1GmZ2b7U/cAOZjxm78dV
TLSH
T16D346C11B5D18432D4B315320AE8EBB65A3EB9304B6199EF67D40F7E4F307C1AA70B66
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	tabspace.exe

C:\Users\Admin\AppData\Local\Temp\tabspace.exe
"C:\Users\Admin\AppData\Local\Temp\tabspace.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3652

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads