Analysis
- max time kernel
149s - max time network
150s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
27/05/2026, 20:10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b24ce86fd38f21f42aa942188936fdb8688f21f559458c1930638123818d76c7.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
b24ce86fd38f21f42aa942188936fdb8688f21f559458c1930638123818d76c7.exe
Resource
win11-20260513-en
2 signatures
150 seconds
General
- Target b24ce86fd38f21f42aa942188936fdb8688f21f559458c1930638123818d76c7.exe
- Size 1.5MB
- Sample260527-yxtjfaht7l
- SHA256 b24ce86fd38f21f42aa942188936fdb8688f21f559458c1930638123818d76c7
- MD5 1c26be9f4f18e686568e1fff2a8973c3
- SHA1 8574ab5d718fce4ff25f554ccb7902e325a23b13
- SHA512 6a67f89b7204225f5cf30beaa4bfd349ce5f400e2d8c2254da6a8d5f27faf5cd297dc446d8be58d3ec96222d0e766cc22c8b4020b70b7ebc028611668e0f4631
- SSDEEP 24576:eZw0d0Brie43pEasqucakbZajgp3LTJ3Ucg17pkkFxrheT2Mb3ruhH7:VBLdaTrakbZajcLTM7rr62MboH7
- TLSH T1AC65BE607656D233E57180F24E78AEB6906DAD2C0F710ACF73C42B7E45355D26E32E2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b24ce86fd38f21f42aa942188936fdb8688f21f559458c1930638123818d76c7.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4676 b24ce86fd38f21f42aa942188936fdb8688f21f559458c1930638123818d76c7.exe 4676 b24ce86fd38f21f42aa942188936fdb8688f21f559458c1930638123818d76c7.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\b24ce86fd38f21f42aa942188936fdb8688f21f559458c1930638123818d76c7.exe"C:\Users\Admin\AppData\Local\Temp\b24ce86fd38f21f42aa942188936fdb8688f21f559458c1930638123818d76c7.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:4676