Analysis
- max time kernel
149s - max time network
178s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
- submitted
05/05/2026, 04:29
General
- Target Class of '09/Class_Of_09-32.exe
- Size 102KB
- Sample260505-e4ppaagv3t
- SHA256 f609f0a066fad76286c28a35c4ee2e42a6391dec4fce4f56ef3215c5f38a2c1c
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Class of '09\Class_Of_09-32.exe"C:\Users\Admin\AppData\Local\Temp\Class of '09\Class_Of_09-32.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3792-0-0x0000000075352000-0x0000000075354000-memory.dmp
memory/3792-125-0x0000000000400000-0x0000000000420000-memory.dmp
memory/3792-128-0x0000000073C00000-0x0000000073CC7000-memory.dmp
memory/3792-130-0x0000000073980000-0x000000007398C000-memory.dmp
memory/3792-126-0x00000000743B0000-0x00000000753BB000-memory.dmp
memory/3792-129-0x0000000000670000-0x0000000000689000-memory.dmp
memory/3792-127-0x0000000073D60000-0x00000000743A8000-memory.dmp
memory/3792-133-0x0000000073D60000-0x00000000743A8000-memory.dmp
memory/3792-132-0x00000000743B0000-0x00000000753BB000-memory.dmp
memory/3792-139-0x0000000073D60000-0x00000000743A8000-memory.dmp
memory/3792-138-0x00000000743B0000-0x00000000753BB000-memory.dmp
memory/3792-145-0x0000000073D60000-0x00000000743A8000-memory.dmp
memory/3792-144-0x00000000743B0000-0x00000000753BB000-memory.dmp
memory/3792-151-0x0000000073D60000-0x00000000743A8000-memory.dmp
memory/3792-150-0x00000000743B0000-0x00000000753BB000-memory.dmp
memory/3792-157-0x0000000073D60000-0x00000000743A8000-memory.dmp
memory/3792-156-0x00000000743B0000-0x00000000753BB000-memory.dmp
memory/3792-163-0x0000000073D60000-0x00000000743A8000-memory.dmp
memory/3792-162-0x00000000743B0000-0x00000000753BB000-memory.dmp
memory/3792-169-0x0000000073D60000-0x00000000743A8000-memory.dmp
memory/3792-168-0x00000000743B0000-0x00000000753BB000-memory.dmp
memory/3792-175-0x0000000073D60000-0x00000000743A8000-memory.dmp
memory/3792-174-0x00000000743B0000-0x00000000753BB000-memory.dmp
memory/3792-180-0x00000000743B0000-0x00000000753BB000-memory.dmp
memory/3792-181-0x0000000073D60000-0x00000000743A8000-memory.dmp
memory/3792-186-0x00000000743B0000-0x00000000753BB000-memory.dmp
memory/3792-187-0x0000000073D60000-0x00000000743A8000-memory.dmp
memory/3792-193-0x0000000073D60000-0x00000000743A8000-memory.dmp
memory/3792-192-0x00000000743B0000-0x00000000753BB000-memory.dmp
memory/3792-199-0x0000000073D60000-0x00000000743A8000-memory.dmp
memory/3792-198-0x00000000743B0000-0x00000000753BB000-memory.dmp
memory/3792-205-0x0000000073D60000-0x00000000743A8000-memory.dmp
memory/3792-204-0x00000000743B0000-0x00000000753BB000-memory.dmp