Analysis
- max time kernel
149s - max time network
149s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
13/05/2026, 15:01
Behavioral task
behavioral1
Sample
Backdoor.exe
Resource
win10v2004-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Backdoor.exe
Resource
win11-20260130-en
3 signatures
150 seconds
General
- Target Backdoor.exe
- Size 92KB
- Sample260513-sd558sfy6n
- SHA256 b3e6d226929ab56b36e5a124e708da156556170fa97dff4ae418cd46ecd828d3
- MD5 36a6dd9ccf92eecde4ede3b2ce9099d6
- SHA1 1455e27bea1fc277b8e7f6c2889c085c7081c2ff
- SHA512 8ea097d6ab3fc071c5c37fc14ec42abaf4a2f3b5a250afb7e2da499d52df462a2834376b8d6b6ba1e41d6e0bb66848a18b2b93b0f9b329e9d4c55a3cba334895
- SSDEEP 1536:IhhW0YTGZWdVseJxaM9kraLdV2QkQ1TbPX8IHOCkIsI4ESHNTh9E+JP19qkP6krP:OhzYTGWVvJ8f2v1TbPzuMsIFSHNThy+z
- TLSH T1F493D813FA4AD0B2E46591F145426F32CEBCBC3636492173D38FCA41AD79892D416EAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Backdoor.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3156 Backdoor.exe - Suspicious use of SendNotifyMessage 1 IoCs
pid Process 3156 Backdoor.exe