46f8a16c53431a5d52dc06c67e0cc31e9376309eb290d07c8266900408fc2d3e

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/09/2026, 16:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
46f8a16c53431a5d52dc06c67e0cc31e9376309eb290d07c8266900408fc2d3e.exe
Size 758KB
Sample260910-tncgcavscw
SHA256 46f8a16c53431a5d52dc06c67e0cc31e9376309eb290d07c8266900408fc2d3e
MD5 bce8ffffa54f506b2f789b5c0f9c45b0
SHA1 469f885c1991219a9d65c4c0811b60b9534dd5c9
SHA512 f63281da2a54097898ab2befc1f553bc20645645837f926f0429fb4db2594c0361032edb1e3b4651220aeedec6b4623fa6d29e4295756489b638beae59a2efe6
SSDEEP 12288:Z5n6TFKo3C2WNtlQ1YAo92WHaxHkSXBMqFRpP7Y1X1y9b:Z5sFKo3pcmSU8WSqFRp
TLSH
T1CDF43A1DB641C537D2233639DC1797A95925BF613E28BC823BF43F0DAF7AA803916192
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/2304-0-0x0000000051000000-0x00000000510C0000-memory.dmp	upx

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	46f8a16c53431a5d52dc06c67e0cc31e9376309eb290d07c8266900408fc2d3e.exe

C:\Users\Admin\AppData\Local\Temp\46f8a16c53431a5d52dc06c67e0cc31e9376309eb290d07c8266900408fc2d3e.exe
"C:\Users\Admin\AppData\Local\Temp\46f8a16c53431a5d52dc06c67e0cc31e9376309eb290d07c8266900408fc2d3e.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2304

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2304-0-0x0000000051000000-0x00000000510C0000-memory.dmp

Download