6169a2ea0736d2d4d4f5cc0e702eb6aad332a62299acfffd2499b4402f9b3b96

Analysis

max time kernel
149s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
31/08/2026, 04:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
6169a2ea0736d2d4d4f5cc0e702eb6aad332a62299acfffd2499b4402f9b3b96.exe
Size 910KB
Sample260831-e44hfavcmc
SHA256 6169a2ea0736d2d4d4f5cc0e702eb6aad332a62299acfffd2499b4402f9b3b96
MD5 1f65aeff7d6df2cb2e00de679a18f7f2
SHA1 05ea634891d58249cc476e7f2933fe429f6d1cf5
SHA512 33a605c43a5246289978a5e2c1b7ae0234b615be411952e711f2126a299ccc99d13cf951c7279567f1362ddb1a483a7103ba1d9e3cfbe9b54af1e00da8264ca4
SSDEEP 24576:VEt7hIXgCWSpRyjdSJVDsVu5unzqWvX1W:VC7gWSjKSJlsQuzqW/1W
TLSH
T1F415BF2279E1C432D1333170495DC358A6BAF4310A3A4EAB77DC676E6F345C18B39BA6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	6169a2ea0736d2d4d4f5cc0e702eb6aad332a62299acfffd2499b4402f9b3b96.exe

C:\Users\Admin\AppData\Local\Temp\6169a2ea0736d2d4d4f5cc0e702eb6aad332a62299acfffd2499b4402f9b3b96.exe
"C:\Users\Admin\AppData\Local\Temp\6169a2ea0736d2d4d4f5cc0e702eb6aad332a62299acfffd2499b4402f9b3b96.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:764

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/764-0-0x0000000000400000-0x0000000000435000-memory.dmp

Download

memory/764-1-0x0000000000400000-0x0000000000435000-memory.dmp