2365bb735db7667489ef3070f0a15f1ae154dfa8360eae57e12dd43cb14779ba

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/09/2026, 12:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2365bb735db7667489ef3070f0a15f1ae154dfa8360eae57e12dd43cb14779ba.exe
Size 3.3MB
Sample260922-prswaaed87
SHA256 2365bb735db7667489ef3070f0a15f1ae154dfa8360eae57e12dd43cb14779ba
MD5 33b5febe6867271e92fb18384e6c1e6c
SHA1 fd9c8f228fde42a4edfd6ef3544bf303d6415679
SHA512 ed6831704f83f7fbebaaba37e967dafc9d46e4fa1569320c8543a5f3a7a7feae1e7e2f68d32c31adeb640ce59ba4569c9d45daf1fa0088290412505a98eddc96
SSDEEP 49152:4DwGHAkqMu7Ht6SCiGognuzsDaarpQAB1KkX/q52guQD333Ay:4MGdPvuzEVTBoPduE333T
TLSH
T1E4F55C23F24D693ED05B3E3D673792A0987B76602D128C57A7EC3A4C4F391812E2A757
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2365bb735db7667489ef3070f0a15f1ae154dfa8360eae57e12dd43cb14779ba.exe

C:\Users\Admin\AppData\Local\Temp\2365bb735db7667489ef3070f0a15f1ae154dfa8360eae57e12dd43cb14779ba.exe
"C:\Users\Admin\AppData\Local\Temp\2365bb735db7667489ef3070f0a15f1ae154dfa8360eae57e12dd43cb14779ba.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4452

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4452-0-0x00000000016F0000-0x00000000016F1000-memory.dmp

Download

memory/4452-1-0x00000000004B0000-0x0000000000812000-memory.dmp