Analysis
- max time kernel
148s - max time network
122s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260706-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
07/07/2026, 06:18
Behavioral task
behavioral1
Sample
ã¥â¥âã¥ââ¾m6506ã¦ââã¥ââ°ã¦ââºã©â©â±ã¥ââ¨_12_10044438.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ã¥â¥âã¥ââ¾m6506ã¦ââã¥ââ°ã¦ââºã©â©â±ã¥ââ¨_12_10044438.exe
Resource
win11ltsc2024-20260706-en
2 signatures
150 seconds
General
- Target ã¥â¥âã¥ââ¾m6506ã¦ââã¥ââ°ã¦ââºã©â©â±ã¥ââ¨_12_10044438.exe
- Size 20.3MB
- Sample260707-g22beabw2w
- SHA256 69fbc9932e2fb5e503c3dc0d9af1595a40431d753b07ca1233c1b1ee229c28f0
- MD5 eada26550ff82506a2f945e47c6fba23
- SHA1 e883692af44c4020334959f61e3da1aa591e2148
- SHA512 ff548a4664af8f64138ce742f7b4210a81265b57e803967dfdfe89f74f1b5aa98580735725945d121a3bf2b6b77114cc0ba52d46f44c16c4c050095bbe0c8b57
- SSDEEP 393216:XbC3wwyoSIDWqJuSEUjLc+0qp+ghTwZCEIiAuTE0Mp3dtr7qku4hLQvMghkiELZh:g/hTbRt9pttr7DjghkiElfOG
- TLSH T13F2713217B8140B2E6830130555BF77E787EB770073486DB9BD46E2C5F316C16A3ABAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ã¥â¥âã¥ââ¾m6506ã¦ââã¥ââ°ã¦ââºã©â©â±ã¥ââ¨_12_10044438.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 460 ã¥â¥âã¥ââ¾m6506ã¦ââã¥ââ°ã¦ââºã©â©â±ã¥ââ¨_12_10044438.exe 460 ã¥â¥âã¥ââ¾m6506ã¦ââã¥ââ°ã¦ââºã©â©â±ã¥ââ¨_12_10044438.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\ã¥â¥âã¥ââ¾m6506ã¦ââã¥ââ°ã¦ââºã©â©â±ã¥ââ¨_12_10044438.exe"C:\Users\Admin\AppData\Local\Temp\ã¥â¥âã¥ââ¾m6506ã¦ââã¥ââ°ã¦ââºã©â©â±ã¥ââ¨_12_10044438.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:460