Analysis
- max time kernel
149s - max time network
149s - platform
windows11-21h2_x64 - resource
win11-20251231-en - resource tags
arch:x64arch:x86image:win11-20251231-enlocale:en-usos:windows11-21h2-x64system - submitted
13/01/2026, 13:04
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
galloflavine.exe
Resource
win10v2004-20251229-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
galloflavine.exe
Resource
win11-20251231-en
2 signatures
150 seconds
General
- Target galloflavine.exe
- Size 396KB
- Sample260113-qa671sgw3a
- SHA256 8a34536561cfbe3a86c88ef96040db62a93b8a9fc80d28ebb4d44824b1122be3
- MD5 55f470e2603340e31a9e0b6278ec2ea6
- SHA1 b9a2ed57f3187fff7e954c2079af298ca428769f
- SHA512 18bad95a2f247bbb5e5175a192f9be3e607d45b5cfbf6cfda17c73a0367cb905e7d884dd18aaf850729c08da034a59d39596c5d506a29aa72ccad426666eaa57
- SSDEEP 6144:h3CpPcS8ZDFHZcEH8gs8Vz2JjC0Ipmp14Be2jAko/+mSDTJqXTTwm3zgukF9BQsB:AcFs8Vz2JjC0Iq+YgoGDDTJkTH8j9B
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language galloflavine.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4596 galloflavine.exe 4596 galloflavine.exe