Analysis
- max time kernel
149s - max time network
103s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
16/05/2026, 13:46
Behavioral task
behavioral1
Sample
yfthfwvltsgnjauj.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
General
- Target yfthfwvltsgnjauj.exe
- Size 12.9MB
- Sample260516-q3d2yaev7v
- SHA256 619edcbf5ecac5790c84b93dc2b3f0ae98679a3156d0964a40328a3ff66e9b17
- MD5 57791c6597d3685f27d6bebf2ae8ce79
- SHA1 117b31757d1de620052f25f73dd4898a11d60d49
- SHA512 7cf5494c386fc3f257a023275cd38bc508cf753f9b36c3e5b6775b4ebf28e8692a725815b9806d1222b900587d913a12b29bab63bc1114bbf5b3741798d8202f
- SSDEEP 393216:7QjyVmWMTUZW3si2esKJY731poQyWrPEDc7tM4jLYBikXn5V2YlYVRGl:cj3dUg7kFpTr6gtMbXnz2YlYY
- TLSH T15BD63356A855B2A4F1451CB6D289797132022CA64D2AFB331F22C2F1737E9C1FF2671B
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/6036-0-0x0000000000230000-0x00000000015BD000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language yfthfwvltsgnjauj.exe