806679961fa2a5d3a72913b93a0eb8b186dae4be786ca249133a2b6d217c43c0

Analysis

max time kernel
149s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/11/2026, 13:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
806679961fa2a5d3a72913b93a0eb8b186dae4be786ca249133a2b6d217c43c0.exe
Size 653KB
Sample261107-qqjfwsdv2m
SHA256 806679961fa2a5d3a72913b93a0eb8b186dae4be786ca249133a2b6d217c43c0
MD5 45a73fc3128ca2c92615dfcf0c6dcc01
SHA1 6e4dce98080a3bf3a0ec5fe4f6ed123973272eae
SHA512 3a63c706a1c03fe0ae1c42841d7bddc61c915d60b1f7266ff6b55227b7574e74579f6e280078b95c32ed2977c825d278b82bc8de2fab6fb6e13e24f0d583c7ea
SSDEEP 12288:GRI99+C5D5VcyRc7LWZ1zGvXTBR5nLnrTsMlIf07nn+v1GWKasTO9H2O3O:j+C5lVcyC7aZ12jBR5nrrrlBn+NGWKX6
TLSH
T104E4CF11B992C032E1A281314D7CEFA694ADA9740B3549C7B7D44F7EAE305C3AB31B67
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Enumerates connected drives 3 TTPs 1 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\E:	806679961fa2a5d3a72913b93a0eb8b186dae4be786ca249133a2b6d217c43c0.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	806679961fa2a5d3a72913b93a0eb8b186dae4be786ca249133a2b6d217c43c0.exe

C:\Users\Admin\AppData\Local\Temp\806679961fa2a5d3a72913b93a0eb8b186dae4be786ca249133a2b6d217c43c0.exe
"C:\Users\Admin\AppData\Local\Temp\806679961fa2a5d3a72913b93a0eb8b186dae4be786ca249133a2b6d217c43c0.exe"
1⤵
- Enumerates connected drives
- System Location Discovery: System Language Discovery
PID:3328

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads