628d0cc45ceea6903613d7e3b4372c2c52d4431204c9b0de7f8af79619d9ba80

Analysis

max time kernel
149s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
14/10/2026, 09:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
628d0cc45ceea6903613d7e3b4372c2c52d4431204c9b0de7f8af79619d9ba80.exe
Size 727KB
Sample261014-k1f6maax21
SHA256 628d0cc45ceea6903613d7e3b4372c2c52d4431204c9b0de7f8af79619d9ba80
MD5 a1950dd893d530e2237f0af111e65e57
SHA1 50a56f3499e0869a0612d242b08f5e3b4abfe36b
SHA512 7a6d87d831a63f0dc2797878c1be8b8a11cb67da44596daecf99849c4af3ddba2f08e91e48fa026dcfdab3b1f2f0b2173fd3adf3ff3faf151bda7ed051206d67
SSDEEP 12288:Je8uCXBdz/h9SiYl+Op4FaVADVonysdqB7PGd5OEI/QTeU7kbWqNCkTH9F3/r+:s8uCXBdz/hJLFqADVo3dK7slnkCqN7TC
TLSH
T107F48F62B981C037E1B2003196BDA7B66D7DB9301B2585CBA3D50B7C6B305D1BE3876B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	628d0cc45ceea6903613d7e3b4372c2c52d4431204c9b0de7f8af79619d9ba80.exe

C:\Users\Admin\AppData\Local\Temp\628d0cc45ceea6903613d7e3b4372c2c52d4431204c9b0de7f8af79619d9ba80.exe
"C:\Users\Admin\AppData\Local\Temp\628d0cc45ceea6903613d7e3b4372c2c52d4431204c9b0de7f8af79619d9ba80.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3020

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

update.log

Path C:\Users\Admin\AppData\Local\Temp\log\update.log
Size 533B
SHA256 3d476c26575fcb9a8846904d52c0802a06152890db6aebe881e90b96e0e803fa
MD5 bcb1336f15cc51e2887a8581e73547e8
SHA1 5fc1372c540b815b44c228cb5c236580f9d9235a
SHA512 720e18ec73946e666d6a22c7053a1da2c3835e962c7bb40f558ecd9bc39c5feac8d906da154f5bd631e78f0d94388208fcb0b939a6e406c379fdb949132f6296
TLSH
T1A1F0A0C00C0563020604F5BA32B230A6EAF37E0306032D9692339B0D1983906E4BEABF
MD5 SHA1 SHA512 TLSH

Submit Download