fcb7032d28217905d113209b99ba594069777300c82732910a78b066e6e12052

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/08/2026, 15:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
fcb7032d28217905d113209b99ba594069777300c82732910a78b066e6e12052.exe
Size 212KB
Sample260825-srcqva1was
SHA256 fcb7032d28217905d113209b99ba594069777300c82732910a78b066e6e12052
MD5 577960480ee4998e99cbb0f67d143e49
SHA1 2b6e743804c567d59d11025290fbece1c45ffc30
SHA512 b4e9902412308f04955d27a20d1613e46a429d9e456c4d17cb9c5de74136503f4f21c17256a99e592a252b74da08fbbdfa26e8d7966614bba738f58a161d1360
SSDEEP 6144:F1+zD2hCXlOhCXumwze19hqHRax6Q6V/ELmapAE9t8EWHGklGpptkVq8KRZJubk2:F1+zD2hCXlOhCXumwze19hqHRax6Q6Vd
TLSH
T1F624B422EF947106F82345B129295976BD623C356972DE4BB345AF8C2C71AC3E8F131B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	fcb7032d28217905d113209b99ba594069777300c82732910a78b066e6e12052.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2364	fcb7032d28217905d113209b99ba594069777300c82732910a78b066e6e12052.exe

C:\Users\Admin\AppData\Local\Temp\fcb7032d28217905d113209b99ba594069777300c82732910a78b066e6e12052.exe
"C:\Users\Admin\AppData\Local\Temp\fcb7032d28217905d113209b99ba594069777300c82732910a78b066e6e12052.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2364

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2364-0-0x0000000000400000-0x000000000044B000-memory.dmp

Download

memory/2364-3-0x0000000000400000-0x000000000044B000-memory.dmp