Overview
overview
10Static
static
10capa-testf...mes.py
windows10-2004-x64
3capa-testf...mes.py
windows11-21h2-x64
3capa-testf...mes.py
windows10-2004-x64
3capa-testf...mes.py
windows11-21h2-x64
3capa-testf...c1.exe
windows10-2004-x64
10capa-testf...c1.exe
windows11-21h2-x64
10capa-testf...e2.exe
windows10-2004-x64
3capa-testf...e2.exe
windows11-21h2-x64
3capa-testf...da.exe
windows10-2004-x64
10capa-testf...da.exe
windows11-21h2-x64
10capa-testf...b5.exe
windows10-2004-x64
6capa-testf...b5.exe
windows11-21h2-x64
6capa-testf...04.exe
windows10-2004-x64
3capa-testf...04.exe
windows11-21h2-x64
3capa-testf...fe.dll
windows10-2004-x64
1capa-testf...fe.dll
windows11-21h2-x64
1capa-testf...b.dll_
windows10-2004-x64
3capa-testf...b.dll_
windows11-21h2-x64
3capa-testf...8.elf_
ubuntu-18.04-amd64
1capa-testf...95.exe
windows10-2004-x64
3capa-testf...95.exe
windows11-21h2-x64
3capa-testf...5c.exe
windows10-2004-x64
8capa-testf...5c.exe
windows11-21h2-x64
8capa-testf...40.dll
windows10-2004-x64
1capa-testf...40.dll
windows11-21h2-x64
1capa-testf...6b.exe
windows10-2004-x64
3capa-testf...6b.exe
windows11-21h2-x64
3capa-testf...78.dll
windows10-2004-x64
1capa-testf...78.dll
windows11-21h2-x64
1capa-testf...cb.exe
windows10-2004-x64
8capa-testf...cb.exe
windows11-21h2-x64
8capa-testf...eb.exe
windows10-2004-x64
7Analysis
- max time kernel
149s - max time network
156s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
18/02/2026, 12:57
Static task
static1
Behavioral task
behavioral1
Sample
capa-testfiles-master/.github/check_runtimes.py
Resource
win10v2004-20260129-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
capa-testfiles-master/.github/check_runtimes.py
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral3
Sample
capa-testfiles-master/.github/check_sample_filenames.py
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
capa-testfiles-master/.github/check_sample_filenames.py
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral5
Sample
capa-testfiles-master/009c2377b67997b0da1579f4bbc822c1.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
capa-testfiles-master/009c2377b67997b0da1579f4bbc822c1.exe
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral7
Sample
capa-testfiles-master/02179f3ba93663074740b5c0d283bae2.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
capa-testfiles-master/02179f3ba93663074740b5c0d283bae2.exe
Resource
win11-20250619-en
windows11-21h2-x64
Behavioral task
behavioral9
Sample
capa-testfiles-master/021f49678cd633dc8cf99c61b3af3dda.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
capa-testfiles-master/021f49678cd633dc8cf99c61b3af3dda.exe
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral11
Sample
capa-testfiles-master/034b7231a49387604e81a5a5d2fe7e08f6982c418a28b719d2faace3c312ebb5.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
capa-testfiles-master/034b7231a49387604e81a5a5d2fe7e08f6982c418a28b719d2faace3c312ebb5.exe
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral13
Sample
capa-testfiles-master/039a6336d0802a2255669e6867a5679c7eb83313dbc61fb1c7232147379bd304.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
capa-testfiles-master/039a6336d0802a2255669e6867a5679c7eb83313dbc61fb1c7232147379bd304.exe
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral15
Sample
capa-testfiles-master/03b236b23b1ec37c663527c1f53af3fe.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
capa-testfiles-master/03b236b23b1ec37c663527c1f53af3fe.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral17
Sample
capa-testfiles-master/03bb32d43885e83bc56c0b2bcad6f0c5ea40402763b7057056c654990022471b.dll_
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
capa-testfiles-master/03bb32d43885e83bc56c0b2bcad6f0c5ea40402763b7057056c654990022471b.dll_
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral19
Sample
capa-testfiles-master/055da8e6ccfe5a9380231ea04b850e18.elf_
Resource
ubuntu1804-amd64-20260126-en
ubuntu-18.04-amd64
Behavioral task
behavioral20
Sample
capa-testfiles-master/0596c4ea5aa8def47f22c85d75aaca95.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
capa-testfiles-master/0596c4ea5aa8def47f22c85d75aaca95.exe
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral22
Sample
capa-testfiles-master/068a76d4823419b376d418cf03215d5c.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
capa-testfiles-master/068a76d4823419b376d418cf03215d5c.exe
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral24
Sample
capa-testfiles-master/071f2d1c4c2201ee95ffe2aa965000f5f615a11a12d345e33b9fb060e5597740.dll
Resource
win10v2004-20250619-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
capa-testfiles-master/071f2d1c4c2201ee95ffe2aa965000f5f615a11a12d345e33b9fb060e5597740.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral26
Sample
capa-testfiles-master/0731679c5f99e8ee65d8b29a3cabfc6b.exe
Resource
win10v2004-20260129-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
capa-testfiles-master/0731679c5f99e8ee65d8b29a3cabfc6b.exe
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral28
Sample
capa-testfiles-master/0761142efbda6c4b1e801223de723578.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
capa-testfiles-master/0761142efbda6c4b1e801223de723578.dll
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral30
Sample
capa-testfiles-master/0796f1c1ea0a142fc1eb7109a44c86cb.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
capa-testfiles-master/0796f1c1ea0a142fc1eb7109a44c86cb.exe
Resource
win11-20260130-en
windows11-21h2-x64
Behavioral task
behavioral32
Sample
capa-testfiles-master/07f7846bbcda782e5639292ad93907eb.exe
Resource
win10v2004-20250619-en
windows10-2004-x64
General
- Target capa-testfiles-master/02179f3ba93663074740b5c0d283bae2.exe
- Size 261KB
- Sample260218-p7apmses6f
- SHA256 39fb2b683dacbaceb78995cd4cedff87ae1514e8aa3678de5deec7ccec187680
- MD5 02179f3ba93663074740b5c0d283bae2
- SHA1 083fcd1ea4976fd9739dbc738a2f41faee0e0256
- SHA512 4a4d54363edb14a13d0cd9caef8219ba3dfb3ee40b247d8ccc41c5d0d385bd71226cffdeca057ed5e61b64e08572660f43d9bb94ff729aea2a0a9e2d16e4805d
- SSDEEP 6144:1J4KYvxupv2mlkmJhJP7JC9AnruTag4lsFItEnYFupq4gIa:P4K+xusn9ArCag9FItEnmupq4gIa
- TLSH T1F34423B7321D5F00E44C74FBFADD2733B6E7C9F3158AA3461A612488BE759801DA1167
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 02179f3ba93663074740b5c0d283bae2.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe 3892 02179f3ba93663074740b5c0d283bae2.exe