Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
28/05/2026, 10:47
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe
Resource
win11-20260513-en
windows11-21h2-x64
2 signatures
150 seconds
General
- Target bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe
- Size 371KB
- Sample260528-mvsctads6n
- SHA256 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77
- MD5 06891d291cc1ff36c95fd8a132519ee7
- SHA1 13445571941410218bd40e826771902765a15d87
- SHA512 34da96f64c8bb7fa7ebab46fb3c1f427743c3c99beaed98d430d0c10535b5563cb37ce7171293bfeaa8fd12e5be093302efabf6b1811d01828587bc886f5bbe6
- SSDEEP 6144:8u7UO3vEv+/goghJqgC8hXQH40YDAOgWRfqhVq4GDLkKXZYqmUqVJDVXN/Uv1zdI:R7pI+/0NhXwAKWRfmq4mAkYqOVJtIdpW
- TLSH T17B84C001B8E1C432D972543109A8DBB58A7DB8610B215ADF63D84AFEDF303C1AB75A77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe 3680 bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe"C:\Users\Admin\AppData\Local\Temp\bb97e3a78261cf5e0b290cca5f250118d4af0cd16a997098dd99a7be6e1cbe77.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:3680