Analysis
- max time kernel
149s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
- submitted
02/06/2026, 04:20
General
- Target 0a61f3fe5390c79cb5634ee6348d8de7f53b1aaf2a1f699e7d846404658abef4.exe
- Size 954KB
- Sample260602-ex8tksez7m
- SHA256 0a61f3fe5390c79cb5634ee6348d8de7f53b1aaf2a1f699e7d846404658abef4
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0a61f3fe5390c79cb5634ee6348d8de7f53b1aaf2a1f699e7d846404658abef4.exe"C:\Users\Admin\AppData\Local\Temp\0a61f3fe5390c79cb5634ee6348d8de7f53b1aaf2a1f699e7d846404658abef4.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5132-0-0x0000000000F20000-0x0000000001020000-memory.dmp
memory/5132-1-0x0000000010000000-0x000000001003E000-memory.dmp
memory/5132-2-0x0000000010000000-0x000000001003E000-memory.dmp
memory/5132-28-0x0000000010000000-0x000000001003E000-memory.dmp
memory/5132-24-0x0000000010000000-0x000000001003E000-memory.dmp
memory/5132-46-0x0000000010000000-0x000000001003E000-memory.dmp
memory/5132-47-0x0000000010000000-0x000000001003E000-memory.dmp
memory/5132-33-0x0000000010000000-0x000000001003E000-memory.dmp
memory/5132-30-0x0000000010000000-0x000000001003E000-memory.dmp
memory/5132-20-0x0000000010000000-0x000000001003E000-memory.dmp
memory/5132-18-0x0000000010000000-0x000000001003E000-memory.dmp
memory/5132-16-0x0000000010000000-0x000000001003E000-memory.dmp
memory/5132-4-0x0000000010000000-0x000000001003E000-memory.dmp
memory/5132-44-0x0000000010000000-0x000000001003E000-memory.dmp
memory/5132-42-0x0000000010000000-0x000000001003E000-memory.dmp
memory/5132-39-0x0000000010000000-0x000000001003E000-memory.dmp
memory/5132-36-0x0000000010000000-0x000000001003E000-memory.dmp
memory/5132-34-0x0000000010000000-0x000000001003E000-memory.dmp
memory/5132-26-0x0000000010000000-0x000000001003E000-memory.dmp
memory/5132-23-0x0000000010000000-0x000000001003E000-memory.dmp
memory/5132-15-0x0000000010000000-0x000000001003E000-memory.dmp
memory/5132-12-0x0000000010000000-0x000000001003E000-memory.dmp
memory/5132-10-0x0000000010000000-0x000000001003E000-memory.dmp
memory/5132-8-0x0000000010000000-0x000000001003E000-memory.dmp
memory/5132-6-0x0000000010000000-0x000000001003E000-memory.dmp
memory/5132-3-0x0000000010000000-0x000000001003E000-memory.dmp