9710b5ea616c646182414b7f73e9b5208f66793d013e91e87137111c0bddb2e6

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
31/08/2026, 02:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9710b5ea616c646182414b7f73e9b5208f66793d013e91e87137111c0bddb2e6.exe
Size 198KB
Sample260831-crangstdlh
SHA256 9710b5ea616c646182414b7f73e9b5208f66793d013e91e87137111c0bddb2e6
MD5 cba13c83ececa8d29c504365944e675e
SHA1 62c06aae04d36840c706af72928d0c25105b9566
SHA512 3de551c6551cd9544ca23abf3c31fc4a8d7ddbb34c90e97ce48b9c38f477923090ef87ced06826aaa3a6b482013d4b43a6c5eaf1ddba86282214538cd0339f8f
SSDEEP 1536:JjMqxL2Q3qOLj5MtVlyEeRupqYYQe4XQxy/UCfgLdQAQfcfymNAWsb70f5x7gx9:ZAyL9W0ElYKXeM9ftffjmNAWq05xs
TLSH
T12014BF57F9D18C32E01569FCAC6AC25AD93ABB311D5E44A37AEF0E4CCB663C1222C355
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	9710b5ea616c646182414b7f73e9b5208f66793d013e91e87137111c0bddb2e6.exe

C:\Users\Admin\AppData\Local\Temp\9710b5ea616c646182414b7f73e9b5208f66793d013e91e87137111c0bddb2e6.exe
"C:\Users\Admin\AppData\Local\Temp\9710b5ea616c646182414b7f73e9b5208f66793d013e91e87137111c0bddb2e6.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1508

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1508-0-0x0000000000400000-0x0000000000435000-memory.dmp

Download

memory/1508-1-0x0000000000400000-0x0000000000435000-memory.dmp