Analysis
- max time kernel
148s - max time network
113s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
14/07/2026, 04:42
Behavioral task
behavioral1
Sample
1fb12d4a81659e1f5ae58f15f07d124d28c4b381c856d2c2ea5c1070c8596fb4.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
General
- Target 1fb12d4a81659e1f5ae58f15f07d124d28c4b381c856d2c2ea5c1070c8596fb4.exe
- Size 83KB
- Sample260714-fb2c2sev7k
- SHA256 1fb12d4a81659e1f5ae58f15f07d124d28c4b381c856d2c2ea5c1070c8596fb4
- MD5 cfa1fef6df11f7616b4e2ba5bc01f74b
- SHA1 f9022626b67da174673f1e3a18c333b79f90b119
- SHA512 3e4edae94f37c40a90fc5dffce793d7b43891ad1e4821d2da3dfc6b3cee97c485fa941840625ed1f8209e84ad2c0783d1aecb23c3e832f5acd6b2e834293262b
- SSDEEP 1536:DMAEQ0BKcmbr/FtM/HLH/HW+Cu3v9xOdr6QhJTYn8MOMdwuqGdpf7VPcH:DMZ9kcmHdi/H72evMVb99MdwuNdpf7Vw
- TLSH T1EB83F1424969A612D52E2BB049D7DA347079BED239D3D22F63807E7E3EF160CCCC6126
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3844-0-0x0000000000400000-0x0000000000442200-memory.dmp upx behavioral2/memory/3844-14-0x0000000000400000-0x0000000000442200-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 1fb12d4a81659e1f5ae58f15f07d124d28c4b381c856d2c2ea5c1070c8596fb4.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3844 1fb12d4a81659e1f5ae58f15f07d124d28c4b381c856d2c2ea5c1070c8596fb4.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\1fb12d4a81659e1f5ae58f15f07d124d28c4b381c856d2c2ea5c1070c8596fb4.exe"C:\Users\Admin\AppData\Local\Temp\1fb12d4a81659e1f5ae58f15f07d124d28c4b381c856d2c2ea5c1070c8596fb4.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3844
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\Bugreport_error.ini
- Size 247B
- SHA256 f0cc31576fe41a2554f73e575271113ad64e83ac990bce99ac95ecb8e9c4431d
- MD5 508fffe90caf683a214659eac196388b
- SHA1 31669ce9a7749ca3d7c2b0f3548a11ebdf2b6b35
- SHA512 88208e67682cd4a06f18264b52186fc85524e399a1c1927e5ebe72cca653ddeee02eca60520633b5daf582788ddad398aa7014e229fc99bd203ecb81c30d9b2d
- TLSH T10DD09E2FC62D89331F2B51EC61B20AA6746DB26C045B592333102ECC2668D535893789
- MD5 SHA1 SHA512 TLSH