873efb815340c93c4b9fde049f5ec0e3fcee6e0e55b9ef6a62ab0445ef1d350c

Analysis

max time kernel
149s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/10/2026, 07:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
873efb815340c93c4b9fde049f5ec0e3fcee6e0e55b9ef6a62ab0445ef1d350c.exe
Size 508KB
Sample261030-jca42aav3y
SHA256 873efb815340c93c4b9fde049f5ec0e3fcee6e0e55b9ef6a62ab0445ef1d350c
MD5 30068024b45832746e636a5a7ba12c4a
SHA1 f5fff7fdf9c971c89cda09752bbe2eb2cb7714b4
SHA512 8b55b55b3167b25ac0d8ffceacf35d841e46abc5b564273e64fb5559d1815f1ae188ec11e3dd48026768f472252e9e963f12bbded3a6e40627f229a3a12f83af
SSDEEP 12288:eZIYP8XfKGVxm2OwfwGLxB9qWVbx7pwdc:eZIYP8XfKGKwL9qcbROdc
TLSH
T1E4B40923A062C076D5152AF2A775073D78F8962118BA8813FFE8CDF1BC755338BA691D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	873efb815340c93c4b9fde049f5ec0e3fcee6e0e55b9ef6a62ab0445ef1d350c.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2076	873efb815340c93c4b9fde049f5ec0e3fcee6e0e55b9ef6a62ab0445ef1d350c.exe

C:\Users\Admin\AppData\Local\Temp\873efb815340c93c4b9fde049f5ec0e3fcee6e0e55b9ef6a62ab0445ef1d350c.exe
"C:\Users\Admin\AppData\Local\Temp\873efb815340c93c4b9fde049f5ec0e3fcee6e0e55b9ef6a62ab0445ef1d350c.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2076

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads