973ab822edaede86db0012f1d9a1f9ee0e64244584726c12fab8ed27ba6e7408

Analysis

max time kernel
149s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 09:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
973ab822edaede86db0012f1d9a1f9ee0e64244584726c12fab8ed27ba6e7408.exe
Size 1.3MB
Sample261002-ltyb1avanh
SHA256 973ab822edaede86db0012f1d9a1f9ee0e64244584726c12fab8ed27ba6e7408
MD5 1bc7f2d3692515ea6933c075bd88f89d
SHA1 5197ce6c5e87c63a772a9b915929804ae674d8f4
SHA512 e89192dbd43b58f3022b1420d503378b431c91596abfa594a94626fefd2f9c3c86f7f40225dfb7a71eb285aa853b0c7c2ab19f56a4a2781726b5baf08082616e
SSDEEP 24576:WodD3QnjO/8cKdNIUFdzyIP+xkepVQUarf2kVQFV5dum:PJCXLFZ+xQUWf2nP
TLSH
T18B657D6AEA9180F2C188087069B76F3ADE7417620D3D46879BD0FEB49F71A60D93335D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	973ab822edaede86db0012f1d9a1f9ee0e64244584726c12fab8ed27ba6e7408.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
652	Process not Found

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4344	973ab822edaede86db0012f1d9a1f9ee0e64244584726c12fab8ed27ba6e7408.exe
4344	973ab822edaede86db0012f1d9a1f9ee0e64244584726c12fab8ed27ba6e7408.exe

C:\Users\Admin\AppData\Local\Temp\973ab822edaede86db0012f1d9a1f9ee0e64244584726c12fab8ed27ba6e7408.exe
"C:\Users\Admin\AppData\Local\Temp\973ab822edaede86db0012f1d9a1f9ee0e64244584726c12fab8ed27ba6e7408.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4344

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads