Analysis
- max time kernel
148s - max time network
121s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
06/07/2026, 03:56
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cd2cbfd508ffe96e6f34dd7d415a0acf5e312083650f7f58bd7f58f2893095da.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
cd2cbfd508ffe96e6f34dd7d415a0acf5e312083650f7f58bd7f58f2893095da.exe
Resource
win11ltsc2024-20260629-en
2 signatures
150 seconds
General
- Target cd2cbfd508ffe96e6f34dd7d415a0acf5e312083650f7f58bd7f58f2893095da.exe
- Size 442KB
- Sample260706-ehe8qads8m
- SHA256 cd2cbfd508ffe96e6f34dd7d415a0acf5e312083650f7f58bd7f58f2893095da
- MD5 7fbbd5695bec92759a17ee3952b7db52
- SHA1 a0eee376451722a9d6aed8abb9db41381bdea532
- SHA512 bdc3b929a811de20f846386fdc9dd75ab51513e650d93056eca677a7311ce3714996ffca6c9190f6a9fb234b5649070ed53841cbb6e6bf3ae6f7a645f49a40ab
- SSDEEP 6144:DNjR91lqLD4uafoh8RU4cUI+23T5PVI9gXnqlAu88oKbSMHKbfGtMIj3T0L1WZV7:D51S4uyUr49g6+7hGh0o7
- TLSH T13FA423A4933917A9DBD5837ED3CA9A62122D1CCA09934E5FA0A5307CE4DFED3431B718
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cd2cbfd508ffe96e6f34dd7d415a0acf5e312083650f7f58bd7f58f2893095da.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 5144 cd2cbfd508ffe96e6f34dd7d415a0acf5e312083650f7f58bd7f58f2893095da.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\cd2cbfd508ffe96e6f34dd7d415a0acf5e312083650f7f58bd7f58f2893095da.exe"C:\Users\Admin\AppData\Local\Temp\cd2cbfd508ffe96e6f34dd7d415a0acf5e312083650f7f58bd7f58f2893095da.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:5144