Analysis
- user interaction
yes - max time kernel
898s - max time network
437s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
28/06/2026, 17:32
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Wolftaym.exe
Resource
win10v2004-20260513-en
2 signatures
900 seconds
Behavioral task
behavioral2
Sample
Wolftaym.exe
Resource
win11ltsc2024-20260618-en
1 signatures
900 seconds
General
- Target Wolftaym.exe
- Size 111KB
- Sample260628-v4dvsaav4v
- SHA256 a2c901469929aee016e5a953a5a7de552797d8701589b6580fe1a860f9b1bbd1
- MD5 2690727c48f896cd7949cec043d1b07c
- SHA1 b60caa1eb071b9a03884707ebd76e768c63e4260
- SHA512 fd0fc6135c392a0043329a5e43eb23f7c971a6f00f0033603662d1640b1ad60f146d891629156e368fd62bf01cb9d2a2974e14d26c017bb57c1bce5d00d700bb
- SSDEEP 3072:S7QQUF/1XVI3kEALLSSWovLbxwvjVQyCulsxagz7p:oQQwPFvLNrLS7XI
- TLSH T17DB35B0135D1C570E6A605352860DFB18B7DFE704FA19EEB73840B7A4E742C26A39E6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Wolftaym.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Wolftaym.exe"C:\Users\Admin\AppData\Local\Temp\Wolftaym.exe"1⤵
- System Location Discovery: System Language Discovery
PID:1816
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:4272
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:2908