Analysis
- user interaction
yes - max time kernel
14s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260630-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260630-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/07/2026, 15:02
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
KZMM.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
KZMM.exe
Resource
win11ltsc2024-20260630-en
2 signatures
150 seconds
General
- Target KZMM.exe
- Size 1.1MB
- Sample260702-semqaadx5q
- SHA256 8edcf8097eda4dadcf73cdca0a05a95bce6bd01bd5d29a39dd110af8b321adb4
- MD5 3264a7c13394482bffe41a5bd4a84654
- SHA1 b93db4ec8583796072a931199ca8d95452ea033a
- SHA512 5e26d2810d2d3116707bdf73527cf5f908b90e6ae14a43395eeeea066b98fe393698cac9178c3493865535c20e8d51857ef6ffa222fd3df7b925fc172bc96742
- SSDEEP 24576:M9tMtU2E7SHSnbx7PzKnKkKAWm3Jg+isg+i6wKtKxKsZLK:M9tMtTsblzKnKkKI32Z9ZbKtKxKULK
- TLSH T10135BE229A717A33D4120A380BD763FE540E7F1E1BB54A091ABDDC0F7AB69C6356F142
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language KZMM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2304 KZMM.exe