0f92d697f4c45e7bc128756819c4cb88431173f46c3a041f9834dbd2ad6fe483

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
17/10/2026, 04:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
0f92d697f4c45e7bc128756819c4cb88431173f46c3a041f9834dbd2ad6fe483.exe
Size 7KB
Sample261017-e1jnvssv6j
SHA256 0f92d697f4c45e7bc128756819c4cb88431173f46c3a041f9834dbd2ad6fe483
MD5 8c80cb479b97a93bc4455402aa5da52b
SHA1 11cea1ad993a7c8b4b744ba53435ee2b445bfe06
SHA512 3d1638243737488bdf933c0f41e0cc8b58c28eb00966f886f791e3c1914ec1db7923660ca271f09826957acba3752345a44d67c4782087e904bac297200d4280
SSDEEP 24:ev1GSkiiljEowScUIuOmMyt8XZh9h9ClfAImrrdmup+:qkfj2Rxly6XZh9hMler5mb
TLSH
T1CFE123A363264DF7F33817BE82C39B95A1FD7B3006A20B490A5814051092D1839F8FA3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	0f92d697f4c45e7bc128756819c4cb88431173f46c3a041f9834dbd2ad6fe483.exe

C:\Users\Admin\AppData\Local\Temp\0f92d697f4c45e7bc128756819c4cb88431173f46c3a041f9834dbd2ad6fe483.exe
"C:\Users\Admin\AppData\Local\Temp\0f92d697f4c45e7bc128756819c4cb88431173f46c3a041f9834dbd2ad6fe483.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:924

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/924-0-0x0000000000400000-0x00000000004051C8-memory.dmp

Download

memory/924-1-0x0000000000400000-0x00000000004051C8-memory.dmp