Overview
overview
6Static
static
3assettocor...dar.py
windows10-2004-x64
6assettocor...dar.py
windows11-21h2-x64
3assettocor...nv.exe
windows10-2004-x64
3assettocor...nv.exe
windows11-21h2-x64
3assettocor...nfo.py
windows10-2004-x64
3assettocor...nfo.py
windows11-21h2-x64
3assettocor...es.dll
windows10-2004-x64
3assettocor...es.dll
windows11-21h2-x64
3assettocor...es.dll
windows10-2004-x64
1assettocor...es.dll
windows11-21h2-x64
1Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
01/06/2026, 18:06
Static task
static1
Behavioral task
behavioral1
Sample
assettocorsa/apps/python/carRadar/carRadar.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
assettocorsa/apps/python/carRadar/carRadar.py
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
assettocorsa/apps/python/carRadar/dist/kn5conv.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
assettocorsa/apps/python/carRadar/dist/kn5conv.exe
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
assettocorsa/apps/python/carRadar/sidekick_lib/sim_info.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
assettocorsa/apps/python/carRadar/sidekick_lib/sim_info.py
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
assettocorsa/apps/python/carRadar/stdlib/_ctypes.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
assettocorsa/apps/python/carRadar/stdlib/_ctypes.dll
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
assettocorsa/apps/python/carRadar/stdlib64/_ctypes.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
assettocorsa/apps/python/carRadar/stdlib64/_ctypes.dll
Resource
win11-20260513-en
General
- Target assettocorsa/apps/python/carRadar/dist/kn5conv.exe
- Size 31KB
- Sample260601-wp3e9sdy7m
- SHA256 9213f487e7d26db1ef2c6b659ef736c7054852a41900bf884b0c8ea5ebade3b9
- MD5 a211050fc06fd5185e3e4b07370ca155
- SHA1 d04634a0ccf86d4680d27797fb5e4012fc534c4f
- SHA512 38e98dca7bed5bc2b9a24366294d124bc3cb74262da304bbe9ed12b74fa14650d89aaaf2c13770293abcf7269f8641be5018a294e1536f0885bac80e554564c1
- SSDEEP 768:n+vQY91s0eYiSKGSdYWxLg6WneVUP6OY+sqQl7S/TKnGRaog:+vQY91s0eYiSKGSdYWxXUjYX7lm/GGR8
- TLSH T120E2A744A7DC4685F0BEAB7A56B21F654B31BA1B183CEABD6CC04DCE09A37417910B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language kn5conv.exe