00f85beb322fe51ab3a3b88abcbbbe40f019a7ee53498e27a507da6824adaf76

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 07:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
$PLUGINSDIR/7z.exe
Size 732KB
Sample260910-jfr7qazemd
SHA256 00f85beb322fe51ab3a3b88abcbbbe40f019a7ee53498e27a507da6824adaf76
MD5 42e83bb2537a79b17e13dd936ec2fef4
SHA1 688ac633d0b61fd698459a55d9909164c04ef56e
SHA512 4d07e73371c4e0d24bb9a351c55e20738b61e8efd6f304ecfa1041a5d94a984a2b292648cac5bf831aba345ccf15437334fcae5c91f1032cf7385ebb3a74857c
SSDEEP 12288:ADGME0uBHVw8VOa/iJ9x1mJhXTUOr/swII0urngQfmsa9mn+WEqdxaxD7BB:AD2lHV4a/G9x1UhjU+EwhrrngwmsemZs
TLSH
T165F49E223BF6C0BBD64201318A1CABF590F5F7590B3059C363908F6D6B399D5D63AA1E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	7z.exe

C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\7z.exe
"C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\7z.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3576

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads