7aaee9b3e21467db960be3a885ed03279d17d8bd9f3362551e20cf6991a3bce3

Analysis

max time kernel
149s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
26/08/2026, 13:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
7aaee9b3e21467db960be3a885ed03279d17d8bd9f3362551e20cf6991a3bce3.exe
Size 6.8MB
Sample260826-qlaceszdlf
SHA256 7aaee9b3e21467db960be3a885ed03279d17d8bd9f3362551e20cf6991a3bce3
MD5 d15257f6897b272debb966e2ea59edc0
SHA1 660b3515fd1c33bffa3bf9775da9a6292e546a3d
SHA512 717c16a754a96ab6b13711ddbc8aae43452adc2f22562f2fdb80785ae7f95eb648be71d77757a039d6ec9d2f52751c95e5386ff91a5256a2af3c9a3888f7eaf1
SSDEEP 196608:l8MQDZI0CLxS74i/WyfXjiFpXZM7azIYhz:l8MQO0fMsffXjpUh
TLSH
T11E76231074419032EBF311B2CEBDE77D46ACA9A00B2656DF53EC167E5F71AC26A3211B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
1992	7aaee9b3e21467db960be3a885ed03279d17d8bd9f3362551e20cf6991a3bce3.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	7aaee9b3e21467db960be3a885ed03279d17d8bd9f3362551e20cf6991a3bce3.exe

C:\Users\Admin\AppData\Local\Temp\7aaee9b3e21467db960be3a885ed03279d17d8bd9f3362551e20cf6991a3bce3.exe
"C:\Users\Admin\AppData\Local\Temp\7aaee9b3e21467db960be3a885ed03279d17d8bd9f3362551e20cf6991a3bce3.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:1992

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

A188982F-1C8C-4817-91C8-84D60250686D.tmp

Path C:\Users\Admin\AppData\Local\Temp\A188982F-1C8C-4817-91C8-84D60250686D.tmp
Size 7.1MB
SHA256 c36fec6944c342e2563e9c7045fa5ee12b93cb7967c66f55e6455bc793289855
MD5 802587b3e20803d3aa64c67916cf4683
SHA1 1c1cea19633fa0eb7b1b30f9c43b13faaacea493
SHA512 8a93ed4c6cf1715426bbe60ad51724a0462eaf6ca4b1a81fece43bd5a621a197f4fa731e7e9269b2cf201279a7be784a9195d707965b0cb0fb15d71145db4e25
SSDEEP 196608:j7MLQfYVvnh+7kox9M238xm6SoFBQoam0iWFRQQDJx1n:sV/hMk2DsxPYLFiWFRFp
TLSH
T1D97612217505C23AD5AA02F1593DBBAF9A2D6E7807B404D7E3C41DBE5D704C3AB3262B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download