Analysis
- user interaction
yes - max time kernel
46s - max time network
34s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
25/05/2026, 23:26
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ImgBurn_252874.exe
Resource
win10v2004-20260513-en
4 signatures
600 seconds
Behavioral task
behavioral2
Sample
ImgBurn_252874.exe
Resource
win10ltsc2021-20260513-en
4 signatures
600 seconds
General
- Target ImgBurn_252874.exe
- Size 4.9MB
- Sample260525-3esxeahv2m
- SHA256 91519881b253fa5bddfc169500ad8a7a448cac9d734f06349e0a044a0380baaa
- MD5 b722fc12f045f80b94eba2ee4c09587a
- SHA1 469ce826fdd94e3eebe693513131010524918926
- SHA512 f1d6faf7a9fd96219ddd5a867db07680d5fbe469391708045267ff2a70ad9206c313acca9951b8b4a5703e57e80fb99e6d53c2caa783e85771d2323d7570a737
- SSDEEP 98304:VoMmJQ6aj03MGkgJ2T3xdSbEOdQWxAuTeu/sTVj3HqhMvLrvc:OMmJNMGmT3Ogi5Tg53Kqzrvc
- TLSH T16836AED0A366F994F78544700019B7E4466A2A303715D8FABFC76BC228282D5EDF6E73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ImgBurn_252874.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4756 ImgBurn_252874.exe 4756 ImgBurn_252874.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4756 ImgBurn_252874.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4756 ImgBurn_252874.exe