Resubmissions
15/04/2026, 14:14
260415-rkc8csbv4w315/04/2026, 14:08
260415-rfzkssbs8s615/04/2026, 14:05
260415-rdvh3aa16w3Analysis
- user interaction
yes - max time kernel
58s - max time network
65s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
15/04/2026, 14:05
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Homelands (Demo v2) (Win64).exe
Resource
win10v2004-20260130-en
2 signatures
300 seconds
Behavioral task
behavioral2
Sample
Homelands (Demo v2) (Win64).exe
Resource
win11-20260130-en
2 signatures
300 seconds
General
- Target Homelands (Demo v2) (Win64).exe
- Size 141.8MB
- Sample260415-rdvh3aa16w
- SHA256 3e33da0beeef998f1c8bad081323a5ad183df17cd104afff883a5b958cb158d0
- MD5 cedd9403a8bcb605fa87fb0349f24269
- SHA1 1b5ca8f18f50f276cda96c680707eebbc07540ce
- SHA512 0754cdbef2a11d932ca6b05352bd84bc7fb9dcbd39e9f3380ec7354f39c11ad9f9678f3d507842e341f42334e78c01066e157bc0c1a001fb545ed471aed2dee5
- SSDEEP 1572864:YGtgFq4ZWZ2V2zz2lOgFwssNlyXBDrbFkP6KwxJcRXbv96K0pMs4YWaSfj:RtQZ72zzDSvw0Dr+7ws5Bf0ms4bNfj
- TLSH T1D168E093B1E402D9E47BE0348A8BA117F7B17C9A533456E715B05A683F37AF06DBE600
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\Local Settings Homelands (Demo v2) (Win64).exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3852 Homelands (Demo v2) (Win64).exe 3852 Homelands (Demo v2) (Win64).exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Homelands (Demo v2) (Win64).exe"C:\Users\Admin\AppData\Local\Temp\Homelands (Demo v2) (Win64).exe"1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3852
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4464