0e731538a73aee70344b788a3e829c9ecf542cb9ba860b388826c4b6d73546dd

Analysis

user interaction
yes
max time kernel
298s
max time network
284s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
26/08/2026, 01:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Application.exe
Size 17.1MB
Sample260826-bwanlsbd39
SHA256 0e731538a73aee70344b788a3e829c9ecf542cb9ba860b388826c4b6d73546dd
MD5 3d22202dba5ad030df5eb1e643538267
SHA1 6ec627e20d49f775234f0ad0ddfd9cfd790d92fb
SHA512 61e4202d3318a8df935d7df2f323c4fa4ae3082027b668273b8a4a66d6dd248e38c2258d539fad8206ff31349c839bf99856acc5a0f73df1d738552ef6847ed9
SSDEEP 393216:fnbpZsf/J40PGFcZkY2y/9LjqUkJ3fPPKZbXPqP0AqyaGPQYVJ:0J1uaZkY2y/9L0J3PoUVqyaGJ
TLSH
T1CA072323A557F86DDD6740B360C162E2313A92E1A90A803D06E06DB15E57DFB6F3CB6C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Application.exe

C:\Users\Admin\AppData\Local\Temp\Application.exe
"C:\Users\Admin\AppData\Local\Temp\Application.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4440

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4440-0-0x0000000000400000-0x000000000041E000-memory.dmp

Download