Analysis
- max time kernel
150s - max time network
98s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
03/05/2026, 00:19
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
byebyejy.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
byebyejy.exe
Resource
win11-20260130-en
windows11-21h2-x64
3 signatures
150 seconds
General
- Target byebyejy.exe
- Size 1.0MB
- Sample260503-amarksdv7p
- SHA256 82556408ea3f4eb474e3f3ccbfa8c2abc17c3c9ad7294cd9eaed67377f340093
- MD5 94896903fa9eac741a4783eefeea083c
- SHA1 ba2679f73a4b68c9f32b8bb0c258af4bdb374570
- SHA512 2941b6d89bebbd6fed2a522413a35efcc709cf9691410b83157e5ea2f1b1d4fbd3ccd103f56b706af127c3ecbcb070c62f5b513bae63dba6001216b663a6964b
- SSDEEP 12288:GWX52VXUz4dhY+h6KlBxqieVP+Arp5By2rmHY+1PZbe+UvZxN:Go0VEzT+8KFqjWAr/ZSHYMe+UvZxN
- TLSH T17D3528537A81A0F1C639153009AA5F35C7279D06CEF4DAAF6E54FA39DE72280BD33225
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language byebyejy.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe - Suspicious use of SetWindowsHookEx 64 IoCs
pid Process 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe 4348 byebyejy.exe