424c6e0f8c9f93429ba086c87129a5a5278459ef9bf5086796f965de6bb590eb

Analysis

user interaction
yes
max time kernel
24s
max time network
26s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/08/2026, 17:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
healingtouch_pure_en.exe
Size 4.9MB
Sample260808-vlk65sam71
SHA256 424c6e0f8c9f93429ba086c87129a5a5278459ef9bf5086796f965de6bb590eb
MD5 cdfe3bfcffce37b735db28b990e0e75d
SHA1 10fcc72dbca613cdeb1688a1e81d57860e725391
SHA512 aa4fd30e7b65542707ff3d69762d76ffd20401fccc3a77700f32022e1502f808b5add83c53ca9d570e4598101347cf62bd0ccab9a837d4c9674f71bb03c2250a
SSDEEP 98304:7MKT/zrG7mUAEadvSo8GTeY7uOO+vWLZZZdZt8F:71zrG7mUAEadvSo47+eLZZZdZt8
TLSH
T134369E307306C1BEC98142F06D2D7A6F946C9B590BB44CD7E3D82E2D59B2AD22F33965
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	healingtouch_pure_en.exe

C:\Users\Admin\AppData\Local\Temp\healingtouch_pure_en.exe
"C:\Users\Admin\AppData\Local\Temp\healingtouch_pure_en.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3772

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads