Analysis
- max time kernel
149s - max time network
150s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
25/04/2026, 23:10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe
Resource
win11-20260130-en
windows11-21h2-x64
4 signatures
150 seconds
General
- Target 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe
- Size 1001KB
- Sample260425-25tqysax21
- SHA256 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa
- MD5 81a41f7509205aafcf66e7f6d19150c3
- SHA1 695c0ccc91e29df06bf3ab825b9c3add656ea511
- SHA512 b5a713f57aa74e37ae0755141d2905fc0d2faa4ae0cc51238e09fc0ee98030a7c7dc63dd16d9d624822ceac271c7b3167ad4384b01b24874881446abacca89d5
- SSDEEP 24576:/qDEvCTbMWu7rQYlBQcBiT6rprG8ahIt+s:/TvC/MTQYxsWR7ah5
- TLSH T1A925BF027391D062FFAB91334F9AF6115BBC6A260123E51F13A81D79BE705B1163E7A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe - Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe - Suspicious use of SendNotifyMessage 64 IoCs
pid Process 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe 4504 6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe"C:\Users\Admin\AppData\Local\Temp\6461226d12e5be03c80a4c920ad62421185095f2cdca5afa0128b110e5506efa.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:4504
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\launcher_config.ini
- Size 285B
- SHA256 3cf754ff98f73e21aceb66f566e0858c555d82d27aefa863d51131eadbaccd63
- MD5 af70c1ce9732d2e7b0c5a2e3a474abb5
- SHA1 d64b9f9807c9d8072ef38cb35dfecc83b72d7e8d
- SHA512 1f4f596b42117ca904397376130c95014f2b97cf69be62b6f6e10a1146402e2053643b2b3a7d58e928ba5e62c7fb2d842da32165968d04e5a33d77421d690451
- TLSH T1C4D0EB9009102881A065E188EC971FC0F11FA08A408151A2FB204AED29AC52C47DC107
- MD5 SHA1 SHA512 TLSH