Overview
overview
3Static
static
3LoadTester.exe
windows10-2004-x64
3LoadTester.exe
windows11-21h2-x64
3RTCore.dll
windows10-2004-x64
3RTCore.dll
windows11-21h2-x64
3RTShutDown.bat
windows10-2004-x64
RTShutDown.bat
windows11-21h2-x64
RealTemp.exe
windows10-2004-x64
3RealTemp.exe
windows11-21h2-x64
3RealTempGT.exe
windows10-2004-x64
3RealTempGT.exe
windows11-21h2-x64
3WinRing0.dll
windows10-2004-x64
3WinRing0.dll
windows11-21h2-x64
3WinRing0.sys
windows10-2004-x64
1WinRing0.sys
windows11-21h2-x64
1WinRing0x64.dll
windows10-2004-x64
1WinRing0x64.dll
windows11-21h2-x64
1WinRing0x64.sys
windows10-2004-x64
1WinRing0x64.sys
windows11-21h2-x64
1i7TurboGT.exe
windows10-2004-x64
3i7TurboGT.exe
windows11-21h2-x64
3Analysis
- max time kernel
148s - max time network
94s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
04/05/2026, 04:49
Static task
static1
Behavioral task
behavioral1
Sample
LoadTester.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
LoadTester.exe
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
RTCore.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
RTCore.dll
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
RTShutDown.bat
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
RTShutDown.bat
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
RealTemp.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
RealTemp.exe
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
RealTempGT.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral10
Sample
RealTempGT.exe
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
WinRing0.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral12
Sample
WinRing0.dll
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
WinRing0.sys
Resource
win10v2004-20260130-en
Behavioral task
behavioral14
Sample
WinRing0.sys
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
WinRing0x64.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral16
Sample
WinRing0x64.dll
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
WinRing0x64.sys
Resource
win10v2004-20260130-en
Behavioral task
behavioral18
Sample
WinRing0x64.sys
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
i7TurboGT.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral20
Sample
i7TurboGT.exe
Resource
win11-20260130-en
General
- Target LoadTester.exe
- Size 31KB
- Sample260504-ff2jlsf18j
- SHA256 f2b70ede45489d35dd32ad61af5ed87b7995a368282770c7a9c41f39ede6f81b
- MD5 a488752b6d5c1c0cad74f9b39a144d0a
- SHA1 a8f435466209690e9f3489b79187ab13c0298dca
- SHA512 011b66c1e1e14ef6edda19ab84cd4b47dda62c463f892760b0da6e24836561dab7fb6d542caad4aea0a8d7fad73d14ef607827399b2aea011634e947e1435922
- SSDEEP 384:UiiiBvafI5w5G1g7blp8pK5+Vj3ZYhcdUb+nmB:UiiiBMIl6hpg4+9Z0HinmB
- TLSH T1DFE2FA075F7A5C62EBA5877662BF93379D70B9D20DB8820B0B10ED1C7C313616E9512E
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language LoadTester.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4852 LoadTester.exe 4852 LoadTester.exe