2d4669ad07501346d0f2ac83d959e96de75afbb87ffe7965c0698c1107ade53a

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 11:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2d4669ad07501346d0f2ac83d959e96de75afbb87ffe7965c0698c1107ade53a.exe
Size 4.2MB
Sample260910-nms5tasdnb
SHA256 2d4669ad07501346d0f2ac83d959e96de75afbb87ffe7965c0698c1107ade53a
MD5 cf7dafe8e7999b0fa8bd758011f97d9c
SHA1 00bc44c06b24d5ee805fa30765d84dc8d2e2e6b1
SHA512 e9f844c28559f89cf036c22d4f0f719aa42ef3cde17e9bd67efcfe41f72425486049eb592cfa7d320c9bb151a5adbdc633fba21e8affef6b1dc1d1e84b4379c5
SSDEEP 98304:FYU5hnuOajWwMPdCpepI3GrwrA+Js333P9:3xuHjWfZIze9
TLSH
T1E8268F03F388753EE4571A3A583FA280983F7A213915CD4B6BFC295C8F396416D2A797
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2d4669ad07501346d0f2ac83d959e96de75afbb87ffe7965c0698c1107ade53a.exe

C:\Users\Admin\AppData\Local\Temp\2d4669ad07501346d0f2ac83d959e96de75afbb87ffe7965c0698c1107ade53a.exe
"C:\Users\Admin\AppData\Local\Temp\2d4669ad07501346d0f2ac83d959e96de75afbb87ffe7965c0698c1107ade53a.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1648

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1648-0-0x0000000003360000-0x0000000003361000-memory.dmp

Download

memory/1648-1-0x00000000007E0000-0x0000000000C2B000-memory.dmp