Analysis
- max time kernel
149s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
17/05/2026, 04:16
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
JournalTrace.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
JournalTrace.exe
Resource
win11-20260513-en
1 signatures
150 seconds
General
- Target JournalTrace.exe
- Size 2.4MB
- Sample260517-evvtyacs4y
- SHA256 8fb81630da2eb82f8c9b4a8eaaff5bbeb3257d9e0bf7af44c6b16b50e98150e3
- MD5 11a6777384aa1dae88be120177343d71
- SHA1 bd8073b906ed21ac78dcbc8e75a4a78b47761b27
- SHA512 a3076bd8bbab9b90efcc6a001837fc06e7dc3d693be461da662af890679bac3c515b81d864e7ddf2f53663cb08024c4c6bcef570f091e7f41c87c6006453c9df
- SSDEEP 49152:vPK8p7s2JST3hpBpYYW4OxGDYSxqqHveKBr/LhhavwLw9AoI3kooDhQAHXIH3:n54TRpB84TDYSxJrzaoLw9AoIfcYH3
- TLSH T177C53328BB34863BDDFB6AF6543665420FB4E20A0515D3FE6DC060DD65EA780CA02F97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language JournalTrace.exe