Analysis
- max time kernel
150s - max time network
114s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
12/07/2026, 06:33
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
85a0af9c61c41266b39e87eaa3511c0df27b94b6418578635aefc28268d48910.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
85a0af9c61c41266b39e87eaa3511c0df27b94b6418578635aefc28268d48910.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
General
- Target 85a0af9c61c41266b39e87eaa3511c0df27b94b6418578635aefc28268d48910.exe
- Size 2.8MB
- Sample260712-hbkfmsfv71
- SHA256 85a0af9c61c41266b39e87eaa3511c0df27b94b6418578635aefc28268d48910
- MD5 af85a1e2528876a5d7b8c11a67d7d43a
- SHA1 2a75733a13961911a8c8525b9512b3edd51bfe7f
- SHA512 d7ebb13b3f94ea910004866e6a5d0f4118406395fd68ac5a4a95092ab2a26cd231237635b450f8c5e319a687464709542b2a795c73c75d62ed6379779ffcb6fe
- SSDEEP 49152:LAkSDIgINnjoDAG57KTGsiwWbz+mfn95pW4UJ74UNyrsYQ1TavEqgw6Q6:xu7INjo7GtL+am/9PW4C3NnY9vE0
- TLSH T109D53399FB626024DF436572C6A1C03062A17CBE3B681B1F5BCD3C1B39B61E5D53A872
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 85a0af9c61c41266b39e87eaa3511c0df27b94b6418578635aefc28268d48910.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 456 85a0af9c61c41266b39e87eaa3511c0df27b94b6418578635aefc28268d48910.exe 456 85a0af9c61c41266b39e87eaa3511c0df27b94b6418578635aefc28268d48910.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\85a0af9c61c41266b39e87eaa3511c0df27b94b6418578635aefc28268d48910.exe"C:\Users\Admin\AppData\Local\Temp\85a0af9c61c41266b39e87eaa3511c0df27b94b6418578635aefc28268d48910.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:456