10b25d5b7a7183e6505c2bc537f3f6645b7067285d6833b1fac112c1bcf54558

Analysis

max time kernel
149s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 16:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
bin/panorama.dll
Size 2.4MB
Sample260804-tpx5favarc
SHA256 10b25d5b7a7183e6505c2bc537f3f6645b7067285d6833b1fac112c1bcf54558
MD5 4ed09c6da7c035573f97665b57d391d8
SHA1 856c6d2f2e7634c0a1c766143f4eedde084baf11
SHA512 77e4e28eb20d886eec63133f190b78adb134cc6f6619fe057dd14fd54e8ab53d66d961d2cb069d25a8f07c4d13b0e9e988e164a2cf88f73a5041dcd38cd9c29e
SSDEEP 49152:UbWsdTBYf2PgSPNfTQKF/KQoz08DbtBox0hLthW1TYxE62CmJ:UvEf2PgSPNfTQW/mBo6a
TLSH
T10AC5BF21F441E0B1ECC910B4E5ADFE7F5A3D5A28073869E3B3E42DA959709D32772782
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 1636 wrote to memory of 1828	1636	rundll32.exe	85

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\bin\panorama.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1636
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\bin\panorama.dll,#1
  2⤵
  - System Location Discovery: System Language Discovery
  PID:1828

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads