Analysis
- max time kernel
149s - max time network
148s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
28/06/2026, 03:50
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Ac_Updater.exe
Resource
win10ltsc2021-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Ac_Updater.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
Ac_Updater.exe
Resource
win11-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
Ac_Updater.exe
Resource
win11ltsc2024-20260618-en
2 signatures
150 seconds
General
- Target Ac_Updater.exe
- Size 321KB
- Sample260628-ed2k6ae13p
- SHA256 21dbb07652f78e94fdd287c5024b27cb175551d1be348ed9235317b4d2735100
- MD5 7f9f015e9ccb23a621781ef6d8cd1eb9
- SHA1 8f6a3a282d3de0cc0e1b5563780d03b8fdc31add
- SHA512 7f3b92da05c647ad5cb7c510d0c90d5de9541811199d6c011d20d290b497d4cc1946937d37576685300ce310f3bb2030e779ae00f9dbb083d3d66251cc48fcae
- SSDEEP 6144:TVjxBwarTXCcHTGVMLxu+H6DGWESIt+z8WC3iH:qu3TCIyESY+z8WHH
- TLSH T198648D5823ED8A26E6FD62B5E83D040D47FAB55A612EFB4F1AA010FD6C13F8449017B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Ac_Updater.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 5020 Ac_Updater.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\Tmp1F6A.tmp
- Size 2KB
- SHA256 ddff6057f4c2cda3adb00d1ed5d389132758a3e799f63b6b908c0e7e786ad381
- MD5 e230506c0be8d819e77a1ad4ae06b1cf
- SHA1 72910266fe4275e4274cef8a2ab708678d01cf4f
- SHA512 36fa7c10502c4d8f26b71ce4076a559df608a95d102351c87c239401ba62042271a32c9fd4b1d8ea41c921d7e55a329632ce0884165750676aa24cd9a9606355
- TLSH T1A5412A0116F90CDCD835A81C78AE4B8747B2FBA31E37968FF532ADEE4524078235E212
- MD5 SHA1 SHA512 TLSH