Analysis
- max time kernel
148s - max time network
114s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
11/07/2026, 05:40
Behavioral task
behavioral1
Sample
4736e95a63c5d9e5c9ff938ff9ccba346a9b9c125622c38cd187b626cf9d4e51.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
General
- Target 4736e95a63c5d9e5c9ff938ff9ccba346a9b9c125622c38cd187b626cf9d4e51.exe
- Size 83KB
- Sample260711-gctv2aev7x
- SHA256 4736e95a63c5d9e5c9ff938ff9ccba346a9b9c125622c38cd187b626cf9d4e51
- MD5 d9b35c19f3bddfee9c92a9ff1434816e
- SHA1 265013d47674981e109917076ee03dadd785c313
- SHA512 24e5daf9bc863b3cde98ecb2c60dcbc3feb35a21a65534c6070fc31658e2cfe16882f07e56457274b47adb25fdf7b6ac23bf7907f8adc554237358387429b16f
- SSDEEP 1536:h/0Dq5rtjD0SxyHGxOasN7SOzslOhjX1OWyPxPfx110CgMdwuqGdpf7VPp:VYq5FD03HGxH2jXzyVSJMdwuNdpf7VR
- TLSH T16C8302AA526D24EEC41E303080ABEF62543CFF251A92DA87A7543CF83EF35245902F71
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/5156-0-0x0000000000400000-0x0000000000442200-memory.dmp upx behavioral2/memory/5156-14-0x0000000000400000-0x0000000000442200-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 4736e95a63c5d9e5c9ff938ff9ccba346a9b9c125622c38cd187b626cf9d4e51.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 5156 4736e95a63c5d9e5c9ff938ff9ccba346a9b9c125622c38cd187b626cf9d4e51.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\4736e95a63c5d9e5c9ff938ff9ccba346a9b9c125622c38cd187b626cf9d4e51.exe"C:\Users\Admin\AppData\Local\Temp\4736e95a63c5d9e5c9ff938ff9ccba346a9b9c125622c38cd187b626cf9d4e51.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:5156
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\Bugreport_error.ini
- Size 247B
- SHA256 fff2274cba08cdaa2d5b43d8c46481660cd1fd867af8983531485e97ce163500
- MD5 51832d49f76009e8332a5297c32444b1
- SHA1 0874b6606b301c225da6d21899b7b86aaf9e8c44
- SHA512 8d1d0cca8d868de9b7c350c5f57338ceb12d7d36bed1efd4a3c3a9daecea4b1df259ba292b914d9784a4c51822e2a52fd406c9f96a88c0c1a357833848e91603
- TLSH T16CD09E2F05698F731FAB51F851370CA4767D037C2A795923332087AC3E40D52589330B
- MD5 SHA1 SHA512 TLSH