Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
08/08/2026, 10:23
General
- Target cb370d0282944fc7b989fa6df5655f497b949d2c467fd8c4eed2f38dfd902183.exe
- Size 2.1MB
- Sample260808-merrcadn7w
- SHA256 cb370d0282944fc7b989fa6df5655f497b949d2c467fd8c4eed2f38dfd902183
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\cb370d0282944fc7b989fa6df5655f497b949d2c467fd8c4eed2f38dfd902183.exe"C:\Users\Admin\AppData\Local\Temp\cb370d0282944fc7b989fa6df5655f497b949d2c467fd8c4eed2f38dfd902183.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4568-4-0x0000000002530000-0x0000000002531000-memory.dmp
memory/4568-3-0x0000000002530000-0x0000000002531000-memory.dmp
memory/4568-8-0x0000000002530000-0x0000000002531000-memory.dmp
memory/4568-7-0x0000000002530000-0x0000000002531000-memory.dmp
memory/4568-6-0x0000000002530000-0x0000000002531000-memory.dmp
memory/4568-5-0x0000000002530000-0x0000000002531000-memory.dmp
memory/4568-10-0x0000000002570000-0x0000000002571000-memory.dmp
memory/4568-17-0x0000000002560000-0x0000000002561000-memory.dmp
memory/4568-16-0x0000000002560000-0x0000000002561000-memory.dmp
memory/4568-9-0x0000000002570000-0x0000000002571000-memory.dmp
memory/4568-15-0x0000000002560000-0x0000000002561000-memory.dmp
memory/4568-14-0x0000000002560000-0x0000000002561000-memory.dmp
memory/4568-13-0x0000000002570000-0x0000000002571000-memory.dmp
memory/4568-12-0x0000000002570000-0x0000000002571000-memory.dmp
memory/4568-11-0x0000000002570000-0x0000000002571000-memory.dmp
memory/4568-18-0x0000000002530000-0x0000000002531000-memory.dmp
memory/4568-20-0x0000000002560000-0x0000000002561000-memory.dmp
memory/4568-21-0x0000000002560000-0x0000000002561000-memory.dmp
memory/4568-19-0x0000000002570000-0x0000000002571000-memory.dmp
memory/4568-23-0x0000000002560000-0x0000000002561000-memory.dmp
memory/4568-22-0x0000000002560000-0x0000000002561000-memory.dmp