03fe22809f091f0520fea79ba4db715ec7483f1a60d1fa9f9b8eba28c9500975

Analysis

max time kernel
149s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/11/2026, 05:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
BattlefrontII 365.exe
Size 4.2MB
Sample261110-fsv8csda79
SHA256 03fe22809f091f0520fea79ba4db715ec7483f1a60d1fa9f9b8eba28c9500975
MD5 450c4f8e2ebdf855ecd9db6c0b6a381c
SHA1 6e058d3da7e77320d66b78e82efa1303b07ac3b3
SHA512 e4af0f242833bff7b570e7df7130b5b73bf720c0a08a76a24f4513f65fac7c5bb052cde947557050094c46be8aa1cff5ad4b159bccc8ff79c6a481137524d8ac
SSDEEP 98304:lNp/oFBSTtbpzdzSbT3vmQfhGxacI1GrBjCTSJwFUBClVTCC48T9zzoTcPlg1Cyf:J/o7STtbpBzSbT3vmQfhGxacI1GrBjCh
TLSH
T144167C00B562C1B5D6502179F9BE3E7FA13D7D540B2C42C363D82959B9F52C22AF22FA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	BattlefrontII 365.exe

C:\Users\Admin\AppData\Local\Temp\BattlefrontII 365.exe
"C:\Users\Admin\AppData\Local\Temp\BattlefrontII 365.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:4560

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads