Analysis
- user interaction
yes - max time kernel
22s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
03/07/2026, 09:27
Static task
static1
Behavioral task
behavioral1
Sample
BraveUpdate.exe
Resource
win11-20260513-en
1 signatures
150 seconds
General
- Target BraveUpdate.exe
- Size 163KB
- Sample260703-le1htaev71
- SHA256 c45ce11550b71ec3d04da7122c3064f1a5ac3b729bff640ecc865667d0bc86e6
- MD5 66541d6f6bbed634861a4a6f2329593f
- SHA1 dbfacd3019c63aadbffc9d4d980cefb8be9f5a11
- SHA512 a9792b0186aa1a1da6c5c86dde39dfdf1e159aed35922639e07efe5dfbda7bf6704765a3db02110c45065a7d912702581bcf2a36ab525ca97897ed9f586ec43b
- SSDEEP 3072:rtDG1K51fU6GKr9SGlHpf9/EUhSuKMOkDtJ13jB+MC2R8Fl2Z/GU7ysb5vvIfFrb:S6Genpf9Mun7B+3p7
- TLSH T1AFF3F60373F4006CF8F36A3169B56725A93EBCB2D961CBAE1780059D2F316918D51B7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language BraveUpdate.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\BraveUpdate.exe"C:\Users\Admin\AppData\Local\Temp\BraveUpdate.exe"1⤵
- System Location Discovery: System Language Discovery
PID:2784
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4308