Analysis
- user interaction
yes - max time kernel
898s - max time network
552s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
25/04/2026, 02:00
General
- Target vmdpcikuycnwbmqy.exe
- Size 12.9MB
- Sample260425-ce7gpaby2w
- SHA256 619edcbf5ecac5790c84b93dc2b3f0ae98679a3156d0964a40328a3ff66e9b17
- MD5 57791c6597d3685f27d6bebf2ae8ce79
- SHA1 117b31757d1de620052f25f73dd4898a11d60d49
- SHA512 7cf5494c386fc3f257a023275cd38bc508cf753f9b36c3e5b6775b4ebf28e8692a725815b9806d1222b900587d913a12b29bab63bc1114bbf5b3741798d8202f
- SSDEEP 393216:7QjyVmWMTUZW3si2esKJY731poQyWrPEDc7tM4jLYBikXn5V2YlYVRGl:cj3dUg7kFpTr6gtMbXnz2YlYY
- TLSH T15BD63356A855B2A4F1451CB6D289797132022CA64D2AFB331F22C2F1737E9C1FF2671B
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/8-0-0x0000000000810000-0x0000000001B9D000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language vmdpcikuycnwbmqy.exe