623182e0fd8b5897bbc1958970cb2697e3362780751b23a12a6d286b8fd74227

Analysis

max time kernel
149s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/10/2026, 18:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Key2.exe
Size 14KB
Sample261029-wrtadadw2v
SHA256 623182e0fd8b5897bbc1958970cb2697e3362780751b23a12a6d286b8fd74227
MD5 43d51b9dd66d57a57622f4fda39e3fca
SHA1 edbdb78f7eab5c656267a11b68c76976490e6f15
SHA512 fb606eaead5eeaf64f9633c53e78b606077c3a8eb34fbda500e0f27639b2f83d39e14b2a73ec9b2d9dcd9f3627d5ae3c393b57d5d3aaa6d490ddf507ff566dc9
SSDEEP 384:eYITI7t/T2KjFlmSreggT76qHXhr6+N9PfBHyndTQ:eYI2bTFlmSreQq3sOxCM
TLSH
T12262BF37FD1087FBD8CA12B08096F52593295C758175C2CF52F4186B2C68C68EDAC3AA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Key2.exe

C:\Users\Admin\AppData\Local\Temp\Key2.exe
"C:\Users\Admin\AppData\Local\Temp\Key2.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4836

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4836-0-0x0000000000400000-0x000000000040E000-memory.dmp

Download

memory/4836-1-0x0000000000400000-0x000000000040E000-memory.dmp