Analysis
- max time kernel
148s - max time network
112s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/07/2026, 07:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5f90473ddb5cd3b44e48f8a111dc87d99bdc090ccd5a184d993cecfecb52cc04.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
5f90473ddb5cd3b44e48f8a111dc87d99bdc090ccd5a184d993cecfecb52cc04.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 5f90473ddb5cd3b44e48f8a111dc87d99bdc090ccd5a184d993cecfecb52cc04.exe
- Size 1.3MB
- Sample260710-jbbdeaft8r
- SHA256 5f90473ddb5cd3b44e48f8a111dc87d99bdc090ccd5a184d993cecfecb52cc04
- MD5 fe0b5c031ae253365122902fb908b088
- SHA1 78b96f16de3626d2cf2e82f6647103dd7e166d3e
- SHA512 b4fd6c31416dfa141bc3d372f04faab89010cb3c23b3e6f973583814fcdf924104fa74d874f3ac8231bdc94d771fd9afebb9abc16ffb15215929739944931646
- SSDEEP 12288:3w+lvmKtI348FEvelUi4m+RrmvRruEgZP3a1y+UTjBByE3l68r97Hw8+aqqZPl1v:3w+lvmKy37FQaU9mMNa1yvTjtueF
- TLSH T13555E526EB420EF3F9ACC4702291523AFA76FE6B06D08987B67CD55D0E3118096F957C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 5f90473ddb5cd3b44e48f8a111dc87d99bdc090ccd5a184d993cecfecb52cc04.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 5640 5f90473ddb5cd3b44e48f8a111dc87d99bdc090ccd5a184d993cecfecb52cc04.exe 5640 5f90473ddb5cd3b44e48f8a111dc87d99bdc090ccd5a184d993cecfecb52cc04.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\5f90473ddb5cd3b44e48f8a111dc87d99bdc090ccd5a184d993cecfecb52cc04.exe"C:\Users\Admin\AppData\Local\Temp\5f90473ddb5cd3b44e48f8a111dc87d99bdc090ccd5a184d993cecfecb52cc04.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:5640