Analysis
- max time kernel
148s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
01/07/2026, 12:18
Static task
static1
Behavioral task
behavioral1
Sample
voicewave_installer_20260622.1782149848318b5507780.exe
Resource
win11ltsc2024-20260630-en
Behavioral task
behavioral2
Sample
$TEMP/downloader_easeus/1.0.0/46free/EDownloader.exe
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral3
Sample
$TEMP/downloader_easeus/1.0.0/46free/aliyun/AliyunWrap.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral4
Sample
$TEMP/downloader_easeus/1.0.0/46free/aliyun/AliyunWrapExe.exe
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral5
Sample
$TEMP/downloader_easeus/1.0.0/46free/aliyun/InfoForSetup.exe
Resource
win11ltsc2024-20260629-en
General
- Target $TEMP/downloader_easeus/1.0.0/46free/aliyun/InfoForSetup.exe
- Size 60KB
- Sample260701-pgmlhsdy5m
- SHA256 e23e375713ec4d7372dc3fababfaa612ecced4f207e7bd68ce5571a21499e2bd
- MD5 af8a1f5caf9c8411d3eee07007450910
- SHA1 5a3c2bd68f6e180920e94319f305f56defb995e0
- SHA512 feddc353f9f8ce519f88fe8618c52b30eb6dd9a21391c295b95196183be010bbc03d3b605df72936804fc724b7075bc52af153c0ae477966bb7aac046a9da55e
- SSDEEP 768:6Vyp8XwXEXrjOgRXvLH4IE3jDnIoiiBbIADgykhUMId50BLbCYiBwa:6ECwXShvLYIE3nnInie2khc50U7Bn
- TLSH T1E4538C127891C032CC2A44B55D34D7A09F2FA92217A498CB7FDD1ABE4FA17C05B3636A
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language InfoForSetup.exe