Analysis
- max time kernel
149s - max time network
112s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
01/06/2026, 13:37
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
tmps46acxv5.exe
Resource
win10ltsc2021-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmps46acxv5.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmps46acxv5.exe
Resource
win11-20260513-en
3 signatures
150 seconds
General
- Target tmps46acxv5.exe
- Size 1.9MB
- Sample260601-qw57vad16w
- SHA256 c0ee272f936320a6931b8ce90f4d4787f8f43b2853f60ab81df29ca7a7ff25f2
- MD5 6c8c3a6154491b7f943928f513606dd2
- SHA1 7c9ba91c13583324ab6915cb9958e51524356ec7
- SHA512 041f69c4485af9fc35108dd355dfb11254271b2c4dccafa188d2d23812731c99d0251ea7738f894508a3bbff2004d30c60a0e42d040bc7583f11751b592bf66c
- SSDEEP 24576:JWqH+KirsXuqqF3pjuAdsoapKD1PmEX+SQDKxkR5XEYLvfiGldiYK6kVA8Y:RGK9kmWPQDKxyXEEXiGLiYeA8Y
- TLSH T184957D123A4AC17BEA6214B29E3CDA59116C7D312B3150DB638C3B7E1AF13D26E39717
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PhysicalDrive0 tmps46acxv5.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language tmps46acxv5.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1112 tmps46acxv5.exe 1112 tmps46acxv5.exe