15f7c8c053c3ac3950a42095f2cc88eb5a7cc7eb905e7e1de17229f12650f6f9

Analysis

max time kernel
149s
max time network
136s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/09/2026, 12:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
qrcode.exe
Size 237KB
Sample260929-prrm8a119m
SHA256 15f7c8c053c3ac3950a42095f2cc88eb5a7cc7eb905e7e1de17229f12650f6f9
MD5 4d442b276099efc136941432a9ed5592
SHA1 5e3f14ea0c577abf84f4dc7764f9e628c151a490
SHA512 7c7a87820c9f5f350b9c7a3cae17c8ab3e01ad485f2d44586e7abb63f32f596c9ccd36b1c30764db665d20e99362e4a6a18b8ebf3325aeb58900e365cf3af826
SSDEEP 6144:8mRNoqedSjhan6ZKIg1j69TBqKYAO3eAy:xRNoLn68Icj6TsKYNeV
TLSH
T1C7349E11B2D2C073D4F3023640EC8B37563EB626077599F7B7D85A19AE302D1A6727EA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	qrcode.exe

C:\Users\Admin\AppData\Local\Temp\qrcode.exe
"C:\Users\Admin\AppData\Local\Temp\qrcode.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4876

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads