Analysis
- max time kernel
148s - max time network
88s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
14/07/2026, 04:32
Behavioral task
behavioral1
Sample
Keygen.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
General
- Target Keygen.exe
- Size 2.0MB
- Sample260714-e51g6sgw2s
- SHA256 97f18b463ddace45bc9a08100b69cc73c1c923887b319e7a49ce6018b491f799
- MD5 4c174ed76448f529f042a83df8231fa4
- SHA1 388cc9c94d5780ddaf9a5ef66a1dbe5b631b5894
- SHA512 b20be016e16f7d080460c15c7c28e20c4d79ef5eaff1e801fc6d2e5fce80bc7a359939f5f8184fd49f96a2e795a34a9c546d81feb31ce9b2267ee77404e6113a
- SSDEEP 49152:b6G7j2SqPasYs2By7oC1I6IVJJwGjliD9CaYfkzmMFbcw8/GgmJ/aB:fj2SqSd47oC1pI3JtliD9C2zbH8vmJ/8
- TLSH T13BA5332A089B24A4E4C0AD74527DF8D44B0539077EDB36714C9AC8F98A769D7F2DB30B
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/6040-0-0x0000000000400000-0x0000000000626000-memory.dmp upx behavioral2/memory/6040-2-0x0000000000400000-0x0000000000626000-memory.dmp upx behavioral2/memory/6040-3-0x0000000000400000-0x0000000000626000-memory.dmp upx behavioral2/memory/6040-4-0x0000000000400000-0x0000000000626000-memory.dmp upx behavioral2/memory/6040-5-0x0000000000400000-0x0000000000626000-memory.dmp upx behavioral2/memory/6040-6-0x0000000000400000-0x0000000000626000-memory.dmp upx behavioral2/memory/6040-7-0x0000000000400000-0x0000000000626000-memory.dmp upx behavioral2/memory/6040-8-0x0000000000400000-0x0000000000626000-memory.dmp upx behavioral2/memory/6040-9-0x0000000000400000-0x0000000000626000-memory.dmp upx behavioral2/memory/6040-10-0x0000000000400000-0x0000000000626000-memory.dmp upx behavioral2/memory/6040-11-0x0000000000400000-0x0000000000626000-memory.dmp upx behavioral2/memory/6040-12-0x0000000000400000-0x0000000000626000-memory.dmp upx behavioral2/memory/6040-13-0x0000000000400000-0x0000000000626000-memory.dmp upx behavioral2/memory/6040-14-0x0000000000400000-0x0000000000626000-memory.dmp upx behavioral2/memory/6040-15-0x0000000000400000-0x0000000000626000-memory.dmp upx behavioral2/memory/6040-16-0x0000000000400000-0x0000000000626000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Keygen.exe