Analysis
- max time kernel
149s - max time network
146s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
21/04/2026, 09:56
Behavioral task
behavioral1
Sample
d9053ea05d907691b1660d102d99e5209a848423c8e1c7ef1d03363ae4e94602.exe
Resource
win10v2004-20260130-en
2 signatures
150 seconds
General
- Target d9053ea05d907691b1660d102d99e5209a848423c8e1c7ef1d03363ae4e94602.exe
- Size 4.3MB
- Sample260421-lyklpscv5l
- SHA256 d9053ea05d907691b1660d102d99e5209a848423c8e1c7ef1d03363ae4e94602
- MD5 be111d5564a756c453481d37fc2a0b61
- SHA1 2d9721d6720111bc6f97181303f8f8335b10d10d
- SHA512 ea4cb2aa58a41b601bedefabed833f83533ad2a4a9ec1cc75d0f97a14011b7b3705c7d4cd0f5114285e244219259c0da669d83943eeac944d6454eae8c5d8b67
- SSDEEP 98304:PxHX7ZFwWW/Frp5IkDK5C3F40/J6vBYuQ8kQcDhk4KJ6olYpp:Z7ZWWwFp2uK5Eh6JNkQcDxoMp
- TLSH T1D4261123B2CB653FF07E8A364973D212553BBB6069128C6A9BE448ACCF250D51D3F746
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language d9053ea05d907691b1660d102d99e5209a848423c8e1c7ef1d03363ae4e94602.exe - Inno Setup is an open-source installation builder for Windows applications. 2 IoCs
Inno Setup installer
resource yara_rule behavioral1/memory/4164-1-0x0000000000B10000-0x0000000000BF2000-memory.dmp innosetup behavioral1/memory/4164-2-0x0000000000B10000-0x0000000000BF2000-memory.dmp innosetup