7e97f2a196e6ba982b25c82d0a56545c9aebd60c121519fff73b7f5dfacb1d37

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/08/2026, 12:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
TinyCad.exe
Size 1.3MB
Sample260808-plndls1sg1
SHA256 7e97f2a196e6ba982b25c82d0a56545c9aebd60c121519fff73b7f5dfacb1d37
MD5 3ba37c3495378c47f6da375686bd100a
SHA1 5c2e7e1c260a66184318970a2455370a14b43baf
SHA512 fb954278cd63add29efbbd7199a05efcee21a7dfffa46fae94e427e84ad39b3aa62ad22e42b27620b093411672c486a7a97ea30ab74b7c49049b7887c30e1e20
SSDEEP 24576:MBhywQ+hsw6/Yfn/cxVk11e1vn+bbmYjxqKjN4/SPBN:6P95+vn+bbmYjxqQ4iBN
TLSH
T137555A81B5C340FBC69F037018BE566952F0AE15CF258AFBA18D6ACD5AF06C0597F329
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	TinyCad.exe

C:\Users\Admin\AppData\Local\Temp\TinyCad.exe
"C:\Users\Admin\AppData\Local\Temp\TinyCad.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4716

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4716-0-0x00000000006F0000-0x0000000000710000-memory.dmp

Download