0339ae209ed4c25872de6abe6c4bfb92355c396c91e1c87ff1e91ad3df9b2423

Analysis

max time kernel
149s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 09:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
0339ae209ed4c25872de6abe6c4bfb92355c396c91e1c87ff1e91ad3df9b2423.exe
Size 1.7MB
Sample260809-lyv3fadj91
SHA256 0339ae209ed4c25872de6abe6c4bfb92355c396c91e1c87ff1e91ad3df9b2423
MD5 d8b81df583f024c5dbb80b0f7b2c8a8b
SHA1 0c1f68c8c773ffc6d4f2774c29b9a775e2eceb78
SHA512 3f150ca0f7d002f77954f954a98706ab479d32dd97ff404bc15094962d6ed4089f197664af8c3922f7ffd41f816012c51ba0ae729ee0f733e0cf6cdc182ca89b
SSDEEP 24576:aRMk4Ip9ld9R/YSPdyfeBq+AKfCVhOPj1Hy+jrxiSw4KXJ+X78SABcAAhyTdq9LO:aRMkxdNPdyYqICDQY+dwJYmyhGqhO
TLSH
T1A785F153B5C380F2CA32557199E66776DA3596160F28DFCBD3A4CE782D32240DA3B21B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	0339ae209ed4c25872de6abe6c4bfb92355c396c91e1c87ff1e91ad3df9b2423.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4548	0339ae209ed4c25872de6abe6c4bfb92355c396c91e1c87ff1e91ad3df9b2423.exe
4548	0339ae209ed4c25872de6abe6c4bfb92355c396c91e1c87ff1e91ad3df9b2423.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4548	0339ae209ed4c25872de6abe6c4bfb92355c396c91e1c87ff1e91ad3df9b2423.exe
4548	0339ae209ed4c25872de6abe6c4bfb92355c396c91e1c87ff1e91ad3df9b2423.exe

C:\Users\Admin\AppData\Local\Temp\0339ae209ed4c25872de6abe6c4bfb92355c396c91e1c87ff1e91ad3df9b2423.exe
"C:\Users\Admin\AppData\Local\Temp\0339ae209ed4c25872de6abe6c4bfb92355c396c91e1c87ff1e91ad3df9b2423.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4548

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads