Overview
overview
8Static
static
3Cute_Progr...me.exe
windows10-2004-x64
7Cute_Progr...me.exe
windows11-21h2-x64
8Cute_Progr...te.exe
windows10-2004-x64
7Cute_Progr...te.exe
windows11-21h2-x64
3Cute_Progr.../1.exe
windows10-2004-x64
7Cute_Progr.../1.exe
windows11-21h2-x64
3Cute_Progr...er.exe
windows10-2004-x64
7Cute_Progr...er.exe
windows11-21h2-x64
3Cute_Progr...an.exe
windows10-2004-x64
7Cute_Progr...an.exe
windows11-21h2-x64
8Cute_Progr...ic.exe
windows10-2004-x64
7Cute_Progr...ic.exe
windows11-21h2-x64
3Cute_Progr.../q.exe
windows10-2004-x64
7Cute_Progr.../q.exe
windows11-21h2-x64
7Cute_Progr...n1.exe
windows10-2004-x64
3Cute_Progr...n1.exe
windows11-21h2-x64
3Cute_Progr...st.exe
windows10-2004-x64
3Cute_Progr...st.exe
windows11-21h2-x64
3Cute_Progr...ll.exe
windows10-2004-x64
5Cute_Progr...ll.exe
windows11-21h2-x64
5Analysis
- max time kernel
898s - max time network
442s - platform
windows10-2004_x64 - resource
win10v2004-20250619-en - resource tags
arch:x64arch:x86image:win10v2004-20250619-enlocale:en-usos:windows10-2004-x64system - submitted
09/05/2026, 17:33
Static task
static1
Behavioral task
behavioral1
Sample
Cute_Program_v2/Click me.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
Cute_Program_v2/Click me.exe
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
Cute_Program_v2/Delete.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
Cute_Program_v2/Delete.exe
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
Cute_Program_v2/_/DontOpenMe/1.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
Cute_Program_v2/_/DontOpenMe/1.exe
Resource
win11-20250619-en
Behavioral task
behavioral7
Sample
Cute_Program_v2/_/DontOpenMe/after.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
Cute_Program_v2/_/DontOpenMe/after.exe
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
Cute_Program_v2/_/DontOpenMe/comman.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral10
Sample
Cute_Program_v2/_/DontOpenMe/comman.exe
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
Cute_Program_v2/_/DontOpenMe/pic.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral12
Sample
Cute_Program_v2/_/DontOpenMe/pic.exe
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
Cute_Program_v2/_/DontOpenMe/q.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral14
Sample
Cute_Program_v2/_/DontOpenMe/q.exe
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
Cute_Program_v2/_/DontOpenMe/ran1.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral16
Sample
Cute_Program_v2/_/DontOpenMe/ran1.exe
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
Cute_Program_v2/_/DontOpenMe/st.exe
Resource
win10v2004-20250619-en
Behavioral task
behavioral18
Sample
Cute_Program_v2/_/DontOpenMe/st.exe
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
Cute_Program_v2/_/DontOpenMe/wall.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral20
Sample
Cute_Program_v2/_/DontOpenMe/wall.exe
Resource
win11-20260130-en
General
- Target Cute_Program_v2/_/DontOpenMe/st.exe
- Size 931KB
- Sample260509-v5damsa16w
- SHA256 d279a1eb183fefeeac683dbecaa3b7c677bcb15630e5567835fe4da3da2bbe4d
- MD5 0c631589439b40875dc30bd7c2f67047
- SHA1 1e3f92c1f2466b994048386ecb2689d4c60173e9
- SHA512 b94831e4acb1ce19496462ee84cde6da10c50e1579a88e63c9d213f0232723d74f0effe7abb7ca4588bd35d6faba9b80e3ee8f11b34fa563dc5b94911aeab036
- SSDEEP 24576:nm5sulQV7Bf5eUHngzv3xynU96at5gxqhhLWrTx0s:d8QV7RZov3xY5ahLWj
- TLSH T1B315CF51F78580F6DD9130B221BEBB77693AA568033049C3B7A82D7D1E926C27D7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language st.exe - Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 4620 st.exe 4620 st.exe - Suspicious use of SendNotifyMessage 2 IoCs
pid Process 4620 st.exe 4620 st.exe