Analysis
- user interaction
yes - max time kernel
149s - max time network
146s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
03/04/2026, 20:02
Behavioral task
behavioral1
Sample
dec_css.exe
Resource
win10v2004-20260130-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
dec_css.exe
Resource
win11-20260130-en
1 signatures
150 seconds
General
- Target dec_css.exe
- Size 137KB
- Sample260403-yr8feadx2v
- SHA256 c33ad557bd31598bddecf9e9d57ec0d87f1c0ae768233861fe9b24250034149b
- MD5 468f02113e68f1f5e0d0159c6109d25d
- SHA1 ab0f9fde50d37fb1141a86847f22696f625b3c4d
- SHA512 fece67969a9a5c7d5b90ff2335b766bd31bd782fc83eb0aac7f6df5518185236b07f3cf8f5fde62f05edb5e0a8c451d0085f14282df7a29862333b1993efce96
- SSDEEP 3072:aVvH8RuVrLyEj/S2CUGACcceJd/klDHa/R8mxu3s8QI5u:KH8RuRLlzgUd6a/AslI5u
- TLSH T128D37C117282A0B1E8472B741E7F77BDEEB04E256B908ACBE3C47D598F1A1E52371C19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language dec_css.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\S2F2J8G4\76561199829660832[1].htm
- Size 28KB
- SHA256 37348d066be27c1e7c2614810c8d7ac3d8990b34cd7f9f836c5351a7a04ec745
- MD5 4a680ff91b35f4a7f7eb61cb069e7983
- SHA1 72cb60e99f0a5a9014a8b28fa944f4e9aecfb900
- SHA512 52074d27098274f385640e4289d0010be899e1f357eb803111675b9f46d5482061e152776a794555ca65a4bffd45b7d07e71c187c1e0a75eb8658a1684504979
- SSDEEP 768:bBpq1J9cOGtCevx83TYbQU1aXfsW9x+X9hJYFohOMqx5QEdxaXfsW9x+X9hJYM2x:bB81JKOGtCevx83TYbQU1aXfsW9x+X9v
- TLSH T17FD2617658ACC83F460D72C2B0125A2EA15F8F7BE5458DE2F3FF025461C2ED60B6781A
- MD5 SHA1 SHA512 SSDEEP TLSH