224b04a7fccdd41b597e79eda97c0329cc073a63559b641076c57d6c90b19782

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
31/08/2026, 10:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
224b04a7fccdd41b597e79eda97c0329cc073a63559b641076c57d6c90b19782.exe
Size 684KB
Sample260831-me4e5ssvbv
SHA256 224b04a7fccdd41b597e79eda97c0329cc073a63559b641076c57d6c90b19782
MD5 cb9ec50b223922cf0dd76ff6afb92fd7
SHA1 fc9a485bea38f35ae1d7652a50bf36f2188b5961
SHA512 bb1eacab94bf0cb7f2833086e7f1d5a5d9a058558d1246e2d3830f420aabb3a958334376a1536cb894d994e34dfaa63bdf6d4f92dd0b9236b5ae75fb1051084f
SSDEEP 6144:wQODmYM/gp6JfW1GR46ynHUNXBU7GAOEK5X16KX:wQcm/ggJfW184jHz7GbV16KX
TLSH
T154E43743A70BA1ACD66C613A726C0B30D7C46C179E261CFEFFB145145A1FBC31AA5CA6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	224b04a7fccdd41b597e79eda97c0329cc073a63559b641076c57d6c90b19782.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3080	224b04a7fccdd41b597e79eda97c0329cc073a63559b641076c57d6c90b19782.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
3080	224b04a7fccdd41b597e79eda97c0329cc073a63559b641076c57d6c90b19782.exe

C:\Users\Admin\AppData\Local\Temp\224b04a7fccdd41b597e79eda97c0329cc073a63559b641076c57d6c90b19782.exe
"C:\Users\Admin\AppData\Local\Temp\224b04a7fccdd41b597e79eda97c0329cc073a63559b641076c57d6c90b19782.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:3080

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

launcher_config.ini

Path C:\Users\Admin\AppData\Local\Temp\launcher_config.ini
Size 348B
SHA256 938df7a6c7ebaa60cf0cd6de9299f550f61d6208601c8067eb4b0b7f975965c9
MD5 e3bed1ee0f3d384f4205e13e8d2c13a5
SHA1 32d5737458eae7fe3026ccc569376c6ca7d8b6ec
SHA512 d339595cc97aa92589b0813eacab7916687d45b2e422f1561676f89b0033050fbe508301e2000c68bfca4f73f9597608094467f389796b31e754e9b9f1e326d9
TLSH
T14BE02D800E002402E076E0A8E8B72BC1E0AAB00A88C15074FF3846DE1ABE43C02D8A07
MD5 SHA1 SHA512 TLSH

Submit Download