5a213344303c4fbe6aa3c5756668b54e15f11b5905ce34eb7677a126865f7bdb

Analysis

max time kernel
298s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 03:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
app.exe
Size 55.1MB
Sample260930-dqhs5ssfmd
SHA256 5a213344303c4fbe6aa3c5756668b54e15f11b5905ce34eb7677a126865f7bdb
MD5 4cbcfcf2c7873ab129a9a503aca5c487
SHA1 7bff9d8036c62e4c73896b22aa8e2d727ec6cc42
SHA512 912740558429d9abe5cb458764a6910aae9186c2ed47cba532653da9488a625bae6032c7f2ba292483b42428ba838105ee0cba0a2aac17f2d78c0262b723dd7f
SSDEEP 393216:5J6wMaSv8BslsVwMUWKOrgP+Pl4Qyk2pIzHPOwRXxz6hg1V2Tv0dCvFaoigq7R5p:r6zTQ7hLINIl+SYVoNPKgjKpdGVHJ
TLSH
T1BFC7BE1663E111AAD577D138C7AB6203EB72B40B13308BDF329C47652F63AE45E7A760
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Signatures

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-939655444-3071939294-1401108526-1000\Control Panel\International\Geo\Nation	app.exe

C:\Users\Admin\AppData\Local\Temp\app.exe
"C:\Users\Admin\AppData\Local\Temp\app.exe"
1⤵
- Checks computer location settings
PID:1020

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads