229c5426dbf209c90d0b6f05453e1860f4412f46cf41b287bd06a48703553c78

Analysis

max time kernel
149s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
11/10/2026, 04:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
229c5426dbf209c90d0b6f05453e1860f4412f46cf41b287bd06a48703553c78.exe
Size 3.4MB
Sample261011-e8vq4ae16z
SHA256 229c5426dbf209c90d0b6f05453e1860f4412f46cf41b287bd06a48703553c78
MD5 f1046cdb2a18c754540251bece410959
SHA1 0834d2a5ccbb90ef38e1abd83eac4d748b73fa50
SHA512 a501ae8bf30e33acca0239cfa0a484cd9ac6a83c19cc3523df502b5f8c1bca18dcb58dc761d3d3cbb66b684cb449db540b28418174b678b3528e0bd93bb71d8c
SSDEEP 49152:5Xp7iQ4AJ2hXgzSeiUkDW5vj2GjZuC7hBUhSOiPzIh+iyoXD4qUy7wQQvhx96S7H:3irHbeiUWW5vhhB4isJHUj9XMc
TLSH
T192F56B11E24290A2D68105F1DD56FAFB97687F3447F691E7F2C02BEBAB202C17932917
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	229c5426dbf209c90d0b6f05453e1860f4412f46cf41b287bd06a48703553c78.exe

C:\Users\Admin\AppData\Local\Temp\229c5426dbf209c90d0b6f05453e1860f4412f46cf41b287bd06a48703553c78.exe
"C:\Users\Admin\AppData\Local\Temp\229c5426dbf209c90d0b6f05453e1860f4412f46cf41b287bd06a48703553c78.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:956

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/956-0-0x00000000758E9000-0x00000000758EA000-memory.dmp

Download

memory/956-1-0x0000000075870000-0x0000000075959000-memory.dmp