a686c4ce95d59295b545b037d555db6d7e09ef3fc9ec6bbcf1de6967df9a2297

Analysis

user interaction
yes
max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/08/2026, 18:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Star Wars - The Force Unleashed II/60 FPS/SWTFU2.exe
Size 17.3MB
Sample260808-wslxpasdkc
SHA256 a686c4ce95d59295b545b037d555db6d7e09ef3fc9ec6bbcf1de6967df9a2297
MD5 72120798614fda11616f0ade755c6e6a
SHA1 a815e676cf47f7866309966bd9e3718c1f443420
SHA512 e6d7d0bdb4b4818c643e636a6efeea23add17177ec237be1a0968ae6cf03bc4e1e88ec0859d4df993a02124d3b3e9ec93fbc152f5a1cb95efb354a2ed7358341
SSDEEP 196608:mOR2KSCt6e8CS0A7VAePiemAJ2/jxcg0VnuYJn:mcnftn8N0A7yJAJ2/jqxZuO
TLSH
T181077C00F55E92B1D45A153C10AEF7EE932CAE350B147BC3B6D03A7AAD326E15D76283
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	SWTFU2.exe

C:\Users\Admin\AppData\Local\Temp\Star Wars - The Force Unleashed II\60 FPS\SWTFU2.exe
"C:\Users\Admin\AppData\Local\Temp\Star Wars - The Force Unleashed II\60 FPS\SWTFU2.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4736

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2336

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads