debbcae364c63efb8e31d3e0d89e5f2c0741323cf57d258a9fb5801ab0e8ae10

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/09/2026, 18:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
debbcae364c63efb8e31d3e0d89e5f2c0741323cf57d258a9fb5801ab0e8ae10.exe
Size 4.8MB
Sample260907-w2fr2ashqe
SHA256 debbcae364c63efb8e31d3e0d89e5f2c0741323cf57d258a9fb5801ab0e8ae10
MD5 725b6b8fc1c145eb2b5d12bcd4be5ac1
SHA1 88df997da88bb98f71929c5e33e7f495ec6cb222
SHA512 690a4fb2f2cd37f7bfadde4e6b1336fa42d6bc63513cf4512a20bb2643f315cd77a83c6f142611a0e71cd92aa0a52c8cf1a03e1bdbf7fef88c447de49bb32aeb
SSDEEP 98304:M+W1kbEcpsF1zQ+A6UWhza16mC333p333y:VWybs0caP
TLSH
T1F4369D13B688653ED47B1A3A5D6BE648983F76303A168C477BF40D4C8F396413D3AA4B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	debbcae364c63efb8e31d3e0d89e5f2c0741323cf57d258a9fb5801ab0e8ae10.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3680	debbcae364c63efb8e31d3e0d89e5f2c0741323cf57d258a9fb5801ab0e8ae10.exe

C:\Users\Admin\AppData\Local\Temp\debbcae364c63efb8e31d3e0d89e5f2c0741323cf57d258a9fb5801ab0e8ae10.exe
"C:\Users\Admin\AppData\Local\Temp\debbcae364c63efb8e31d3e0d89e5f2c0741323cf57d258a9fb5801ab0e8ae10.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3680

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3680-0-0x0000000001480000-0x0000000001481000-memory.dmp

Download

memory/3680-1-0x0000000000350000-0x000000000083D000-memory.dmp