4ada51acb75951edad803bd18a4f7379dbf8f754c071a14e65dd769103a3d9d4

Analysis

max time kernel
149s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/08/2026, 06:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
4ada51acb75951edad803bd18a4f7379dbf8f754c071a14e65dd769103a3d9d4.exe
Size 685KB
Sample260827-hef8dszgma
SHA256 4ada51acb75951edad803bd18a4f7379dbf8f754c071a14e65dd769103a3d9d4
MD5 1662e1ba65f64a2db89d28c3d9bf65f5
SHA1 18416b9ec363f3f62613914e2965fcdad5f7f471
SHA512 3026f4069dd71175f9549b64a25b0519048c391cbfe7f25e52675cd16e0206c9dca5b8259c7122d6ed79468324be6e91af0b32620dc3394d9f35fec166ac5652
SSDEEP 12288:W4OI5n2sdiQfx9lcsVoP2QKX2ToTzQi9ONCYMWvj2UGSV6GaU6n3C3sDF4VDgrDX:lOIYGfx8RP2QJsTDQTMWKUrYCW4FgrDX
TLSH
T1BAE4235B076A4A0AC00CE1B1CB2B5E685F64F3152CA656333D75F24EBD3704B6EC90AE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/1672-0-0x0000000000400000-0x0000000000668000-memory.dmp	upx

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	4ada51acb75951edad803bd18a4f7379dbf8f754c071a14e65dd769103a3d9d4.exe

C:\Users\Admin\AppData\Local\Temp\4ada51acb75951edad803bd18a4f7379dbf8f754c071a14e65dd769103a3d9d4.exe
"C:\Users\Admin\AppData\Local\Temp\4ada51acb75951edad803bd18a4f7379dbf8f754c071a14e65dd769103a3d9d4.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1672

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1672-0-0x0000000000400000-0x0000000000668000-memory.dmp

Download