Analysis
- max time kernel
148s - max time network
112s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/07/2026, 04:19
Behavioral task
behavioral1
Sample
7ea50230caae5c14a9048ef262eb790125dca31133495640a12cb44c07ec1a15.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
General
- Target 7ea50230caae5c14a9048ef262eb790125dca31133495640a12cb44c07ec1a15.exe
- Size 83KB
- Sample260710-exs35aes4z
- SHA256 7ea50230caae5c14a9048ef262eb790125dca31133495640a12cb44c07ec1a15
- MD5 a691d31a3ab7625317c8942d3abfcb2c
- SHA1 ef9b158fceca8864d814e96d110c6677d8d038ea
- SHA512 88073dea0b4ec242962f07e82a1dd8ef667e350cc120f9dd50b3b6782b4968042ef6bad3604010307d654cf91d9ac61fcc27eaaf83977d93cedf0b4916a5857d
- SSDEEP 1536:EjPhFXtm71iz4KwJ4QAErBuhFLGCU+rMdwuqGdpf7VP/:mm78hEsrMdwuNdpf7Vn
- TLSH T18C83010562A9A826D8481B794C8BCF685334FF6D2B8747EA02103C173CFAA589DD71F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3116-0-0x0000000000400000-0x0000000000442200-memory.dmp upx behavioral2/memory/3116-13-0x0000000000400000-0x0000000000442200-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 7ea50230caae5c14a9048ef262eb790125dca31133495640a12cb44c07ec1a15.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3116 7ea50230caae5c14a9048ef262eb790125dca31133495640a12cb44c07ec1a15.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\7ea50230caae5c14a9048ef262eb790125dca31133495640a12cb44c07ec1a15.exe"C:\Users\Admin\AppData\Local\Temp\7ea50230caae5c14a9048ef262eb790125dca31133495640a12cb44c07ec1a15.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3116
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\Bugreport_error.ini
- Size 247B
- SHA256 7b97f036b2dbd17ceb28535f3f79276ec7427b7ae6de1b10c631a67e2c9b8b07
- MD5 9a43ea1bceae21953355ff38be913fc8
- SHA1 94c0e15d418cbefddbf366bc56be364205d862f5
- SHA512 42032d7c062abdbd8fb265fa304164480c1f8768033cf879c4aa29e1e5b2cffa6ad2a3b65f6bb6786d3e7813afba39641c187f7e64f044f26605e2483d14d21b
- TLSH T146D0623B051E99721F3F69EC903205FE60B9096C262759323611067D3661D515416319
- MD5 SHA1 SHA512 TLSH