Analysis
- max time kernel
149s - max time network
151s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
20/04/2026, 06:23
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
abacus.exe
Resource
win10v2004-20260130-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
abacus.exe
Resource
win11-20260130-en
2 signatures
150 seconds
General
- Target abacus.exe
- Size 568KB
- Sample260420-g5ralsbs7m
- SHA256 d613eef058e33aa2be3d058e47b2d493a7dcd1a503a9393aa2890feb858f73c8
- MD5 92f7f74d6b3cf8cbf1dfa145348c631b
- SHA1 049a4bc863ebcaf2178acf391ac0fee1696730c2
- SHA512 e81e6b1c35e14fc90df5a9b5945527741df9991753c8392e127148e35c0387f4806e316ceb222ffabba296ccacaaba8ba55c89226666e472e0dcd0db52554bbc
- SSDEEP 12288:v4eo6+WjBnLUzbVOYVvfhodhFuN24M+/rjNJi:w0+mavfSV4M+/V
- TLSH T1A7C42F16EA21A42FF453CDB0697996467C2D2D321690EC5BF7801BA930B49ABF1F071F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language abacus.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4092 abacus.exe