Analysis
- max time kernel
149s - max time network
157s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
15/04/2026, 12:27
Behavioral task
behavioral1
Sample
Galaxy2d.dll
Resource
win10v2004-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Galaxy2d.dll
Resource
win11-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
g2d.exe
Resource
win10v2004-20260130-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
g2d.exe
Resource
win11-20260130-en
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
lua51.dll
Resource
win10v2004-20260130-en
4 signatures
150 seconds
General
- Target g2d.exe
- Size 5.1MB
- Sample260415-pm286aes6k
- SHA256 b93f26bd4513860ed39e3c883bcb4b8988a8d282bcdd1790b57cb83e207531c6
- MD5 c4145ad0d7f62b4674ab1642c512385c
- SHA1 d23a270e3a4105c97b561cd5968f3a3225875431
- SHA512 23c9e8de83cf3b87344d9ea7abc7e22bbd89036cb7d40c6b1eac1c0b7cfbb14754e9ffc3fe2366780d52a7914ebbdad7ebddd21a873d9097e5cb65f2e6ded9a7
- SSDEEP 98304:lfMZdMULtykLuOxwC3ks9zz5kHz14IATy8muBnd2P1hL1+gs:lf+PLtHiOmC3ks9zz5aJ4IA1muBdi1h
- TLSH T1D84612E9E1E1C0D9C346D57CCBDC82258ED76A64E3B589FB9839439419822C04BEEDC7
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral3/memory/4540-1-0x00000000758C0000-0x000000007591B000-memory.dmp upx behavioral3/memory/4540-6-0x00000000758C0000-0x000000007591B000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language g2d.exe