35e8fee8c58f48786e243e4790264ed2b1f3e3e72fa920385a7221c3b43a3452

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 13:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
35e8fee8c58f48786e243e4790264ed2b1f3e3e72fa920385a7221c3b43a3452.exe
Size 869KB
Sample260910-qdtfbsxwev
SHA256 35e8fee8c58f48786e243e4790264ed2b1f3e3e72fa920385a7221c3b43a3452
MD5 50bb677793ae8c21a0b7fb668838cbc7
SHA1 7d2ffee95869ecda28c73760c2c16fac7b07de3e
SHA512 2925bdf6ab8ddc0875bd5c67445fa407de171cb232566eb3f7e27484fbb0722c56c1c62915dc8537cda5d2eaf2743bd9f2a85241a08dc8e938109a2d79573648
SSDEEP 12288:PVP6SdEmcZAO8VgBHaj5bR8zOzB1UCfj/Adff9TnN2j+5yX6jn77gfmXJpu2CJ:3uAO8SB6j5bR8zKL4H9T0qsfaJwLJ
TLSH
T1A615E0013BA08EB6F566807B197A631D1A6ABD224F11E2C373606F5DCD325C5CE3E366
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	35e8fee8c58f48786e243e4790264ed2b1f3e3e72fa920385a7221c3b43a3452.exe

C:\Users\Admin\AppData\Local\Temp\35e8fee8c58f48786e243e4790264ed2b1f3e3e72fa920385a7221c3b43a3452.exe
"C:\Users\Admin\AppData\Local\Temp\35e8fee8c58f48786e243e4790264ed2b1f3e3e72fa920385a7221c3b43a3452.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1632

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1632-0-0x0000000000400000-0x0000000000570000-memory.dmp

Download

memory/1632-1-0x0000000000400000-0x0000000000570000-memory.dmp