Analysis
- max time kernel
148s - max time network
124s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/07/2026, 14:00
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
aappez.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
aappez.exe
Resource
win11ltsc2024-20260629-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
log.dll
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
log.dll
Resource
win11ltsc2024-20260630-en
4 signatures
150 seconds
General
- Target aappez.exe
- Size 193KB
- Sample260702-rayrbacx8q
- SHA256 d23373a73e086f2575cd5f994dc37d9af39757b48ea04d34b9ffe0b0b8dd4d5a
- MD5 b302e8508de2e3f1942b19fd66a8d70a
- SHA1 9bb45adb4fe395beb371704fb5beda3244956ae6
- SHA512 a6fd789b1ebff7a4dd413a0cebcfd7528f297ca08396693b43a83f0bae14e62d1721275cd3d8119c6bb9b2780ee9abd74207a101b54d92dce41b7f191420973c
- SSDEEP 3072:b0RWOvoBki40ZoXsiDtMKL6LP5xj2xcX44cX25SjA3:qfoBvusixMKmLnjN0XxjA3
- TLSH T14414171172818872EF1A07315451D6A4CB39BF390BAC96CFE7E87A754A312D3993B34E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language aappez.exe - Suspicious behavior: EnumeratesProcesses 36 IoCs
pid Process 2696 aappez.exe 2696 aappez.exe 2696 aappez.exe 2696 aappez.exe 2696 aappez.exe 2696 aappez.exe 2696 aappez.exe 2696 aappez.exe 2696 aappez.exe 2696 aappez.exe 2696 aappez.exe 2696 aappez.exe 2696 aappez.exe 2696 aappez.exe 2696 aappez.exe 2696 aappez.exe 2696 aappez.exe 2696 aappez.exe 2696 aappez.exe 2696 aappez.exe 2696 aappez.exe 2696 aappez.exe 2696 aappez.exe 2696 aappez.exe 2696 aappez.exe 2696 aappez.exe 2696 aappez.exe 2696 aappez.exe 2696 aappez.exe 2696 aappez.exe 2696 aappez.exe 2696 aappez.exe 2696 aappez.exe 2696 aappez.exe 2696 aappez.exe 2696 aappez.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2696 aappez.exe 2696 aappez.exe 2696 aappez.exe