Analysis

  • max time kernel
    149s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    25/08/2026, 17:08

General

  • Target
    1931bd0ea8f55d23a601e19d2551aef96cf124ef31e0d548d897cec871d63def.exe
  • Size 324KB
  • Sample260825-vntlasszbx
  • SHA256 1931bd0ea8f55d23a601e19d2551aef96cf124ef31e0d548d897cec871d63def
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\1931bd0ea8f55d23a601e19d2551aef96cf124ef31e0d548d897cec871d63def.exe
    "C:\Users\Admin\AppData\Local\Temp\1931bd0ea8f55d23a601e19d2551aef96cf124ef31e0d548d897cec871d63def.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:2580

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/2580-0-0x0000000000590000-0x00000000005E8000-memory.dmp

        memory/2580-1-0x0000000005650000-0x0000000005BF4000-memory.dmp

        memory/2580-2-0x0000000004FC0000-0x0000000005052000-memory.dmp

        memory/2580-3-0x0000000005230000-0x0000000005240000-memory.dmp

        memory/2580-4-0x0000000005060000-0x000000000506A000-memory.dmp

        memory/2580-5-0x0000000005230000-0x0000000005240000-memory.dmp

        memory/2580-6-0x0000000005230000-0x0000000005240000-memory.dmp

        memory/2580-7-0x0000000005230000-0x0000000005240000-memory.dmp