Analysis
- max time kernel
148s - max time network
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260617-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/06/2026, 10:16
Behavioral task
behavioral1
Sample
Backdoor.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Backdoor.exe
Resource
win11ltsc2024-20260617-en
3 signatures
150 seconds
General
- Target Backdoor.exe
- Size 92KB
- Sample260624-matedabt5x
- SHA256 31d542281218b00184bef36830662e9eb7e7e9efdc7510cf55802fe08db0de67
- MD5 7bf554e803133dcd2d8d4bcc8c18ccb1
- SHA1 8600bd9c4aaebfdf882c3e19b0856226f4883d94
- SHA512 c9fb89de734894f8da7048bcb60f290ccf12c2c029fce494d387e93e610ecf5eb17cdc1b3593751a23489caaea5619a5d6270440c2021adca26ecd1a24c4cdcd
- SSDEEP 1536:YhhW0YTGZWdVseJxaM9kraLdV2QkQ1TbPX8IHOCkIsI4ESHNTh9E+JP19qkP6krJ:+hzYTGWVvJ8f2v1TbPzuMsIFSHNThy+d
- TLSH T1A893D813FA4AD0B2E42591F145426F32CEBCBC3736492173D38FCA41AD79892D416EAE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Backdoor.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4772 Backdoor.exe - Suspicious use of SendNotifyMessage 1 IoCs
pid Process 4772 Backdoor.exe