Analysis
- max time kernel
0s - platform
windows11-21h2_x64 - resource
win11-20250502-en - resource tags
arch:x64arch:x86image:win11-20250502-enlocale:en-usos:windows11-21h2-x64system - submitted
11/05/2026, 02:48
Static task
static1
Behavioral task
behavioral1
Sample
screen_1776567853224.mp4
Resource
win10v2004-20260130-en
15 signatures
900 seconds
Behavioral task
behavioral2
Sample
screen_1776567853224.mp4
Resource
win11-20250502-en
1 signatures
900 seconds
General
- Target screen_1776567853224.mp4
- Size 9.5MB
- Sample260511-dahs7sdx8m
- SHA256 7dcca932203d9702181967ceff44d028f225bb21c95c94b71379ece65f9a6313
- MD5 73d63993e6b8359f20a6e88c25c2edca
- SHA1 2325e28e8c5d05c2cd47e49ee92e2ca959338b1c
- SHA512 e5d5fe5392dc84975e589deaf4e1af8887a9f24e9d51c9e3f962b34c2f0b9dc0fc4cc6992b6323a20d0f15073e94f2919c40984ba1a67577f508df2282a851c0
- SSDEEP 196608:CbC/NLZExWiEJCKrDIhGnaHxfxAP7BO4vi8FIqw3yPZ9dOQNq6Qxf:WMFZQACOKDdxAjBzvijeZ9dpq6Qxf
- TLSH T162A633DF2728DE1FFA158E33A19B3319B1F1D2581974A3CF9B7907928AA17867CE4104
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language wmplayer.exe
Processes
-
C:\Program Files (x86)\Windows Media Player\wmplayer.exe"C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:6 /Open "C:\Users\Admin\AppData\Local\Temp\screen_1776567853224.mp4"1⤵
- System Location Discovery: System Language Discovery
PID:3128 -
C:\Windows\SysWOW64\unregmp2.exe"C:\Windows\System32\unregmp2.exe" /AsyncFirstLogon2⤵PID:3320
-