Analysis
- max time kernel
149s - max time network
94s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
15/04/2026, 12:27
Behavioral task
behavioral1
Sample
Galaxy2d.dll
Resource
win10v2004-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Galaxy2d.dll
Resource
win11-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
g2d.exe
Resource
win10v2004-20260130-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
g2d.exe
Resource
win11-20260130-en
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
lua51.dll
Resource
win10v2004-20260130-en
4 signatures
150 seconds
General
- Target g2d.exe
- Size 5.1MB
- Sample260415-pm286aes6k
- SHA256 b93f26bd4513860ed39e3c883bcb4b8988a8d282bcdd1790b57cb83e207531c6
- MD5 c4145ad0d7f62b4674ab1642c512385c
- SHA1 d23a270e3a4105c97b561cd5968f3a3225875431
- SHA512 23c9e8de83cf3b87344d9ea7abc7e22bbd89036cb7d40c6b1eac1c0b7cfbb14754e9ffc3fe2366780d52a7914ebbdad7ebddd21a873d9097e5cb65f2e6ded9a7
- SSDEEP 98304:lfMZdMULtykLuOxwC3ks9zz5kHz14IATy8muBnd2P1hL1+gs:lf+PLtHiOmC3ks9zz5aJ4IA1muBdi1h
- TLSH T1D84612E9E1E1C0D9C346D57CCBDC82258ED76A64E3B589FB9839439419822C04BEEDC7
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral4/memory/3796-1-0x0000000075410000-0x000000007546B000-memory.dmp upx behavioral4/memory/3796-7-0x0000000075410000-0x000000007546B000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language g2d.exe