Analysis
- max time kernel
149s - max time network
131s - platform
windows11-21h2_x64 - resource
win11-20251015-en - resource tags
arch:x64arch:x86image:win11-20251015-enlocale:en-usos:windows11-21h2-x64system - submitted
29/11/2025, 03:30
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
48A6B46FF9206D3D0FC7626AE43AC78B.exe
Resource
win10v2004-20251016-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
48A6B46FF9206D3D0FC7626AE43AC78B.exe
Resource
win11-20251015-en
2 signatures
150 seconds
General
- Target 48A6B46FF9206D3D0FC7626AE43AC78B.exe
- Size 638KB
- Sample251129-d2m71azqfx
- SHA256 cd99dad8d914e3fba54e450fc20b2b71fb8d0bed3e6da1739db272572be75fe4
- MD5 48a6b46ff9206d3d0fc7626ae43ac78b
- SHA1 b8ba029e92dcb6fd9b6bbadd7e83787bb63612f2
- SHA512 39fb78ef78ee8aad3f7c3b1538bbe7d13531dfd8f66a93c0520f5b52618805c26ce5469b0abb6008155e2009c7d0de601849bb5e6b9e5d0aa1be871302653ca7
- SSDEEP 12288:i/lZ7RzvCAgXtU0LB10YDmFcgVKT0YuTcoEHSsZu:i/b7RerWUByYDmFg3uTCHSsZu
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 48A6B46FF9206D3D0FC7626AE43AC78B.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3444 48A6B46FF9206D3D0FC7626AE43AC78B.exe