Analysis
- max time kernel
149s - max time network
98s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
08/06/2026, 21:46
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Unpacker.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Unpacker.exe
Resource
win11-20260513-en
4 signatures
150 seconds
General
- Target Unpacker.exe
- Size 740KB
- Sample260608-1mt4bsf13l
- SHA256 8a97903985caa08a3692d6fba10872cb447a89756ecb10ffab040992b375096f
- MD5 1d3bed1d8e47d0b895e8e1ae5590343b
- SHA1 02fddb7e3424bb87be6a6796bf1e1a28ea7931ed
- SHA512 3544d0413a41a176b22c61ffce53616b75176e65e051f200ed479ebbcf9ec38b9c7601b940a0bb527272fbbe73dbf2100ba90aece20d88278efbe9e45b2c02dd
- SSDEEP 12288:NZfqaHcjqAUhzXAYOsJTPG5h18Q0lUhoD2mFb9ohvRoblvr8innhQjXJPy:NVq9qRhcbsxOf50qhchohvRopvwihQj
- TLSH T1B1F423C6B2B86E67C6FC5AF13BB5384251F6798149A0E5CC2DD820EF93F2B114581F1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Unpacker.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe 1572 Unpacker.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1572 Unpacker.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1572 Unpacker.exe