Analysis
- max time kernel
148s - max time network
114s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
14/07/2026, 10:23
Behavioral task
behavioral1
Sample
b8035b98e56e0855eb40022e3f041168a051cf4459060dc9f9a2e7444acadef0.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
b8035b98e56e0855eb40022e3f041168a051cf4459060dc9f9a2e7444acadef0.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target b8035b98e56e0855eb40022e3f041168a051cf4459060dc9f9a2e7444acadef0.exe
- Size 3.6MB
- Sample260714-me8d4ads7x
- SHA256 b8035b98e56e0855eb40022e3f041168a051cf4459060dc9f9a2e7444acadef0
- MD5 3945759104f8f3d537faa0edd43d304f
- SHA1 2ca4178951e9530abe271cfb6c8502cfbdd8d80e
- SHA512 7f21814e2553ded79896132d23c84fb2055031e53a483cf7355ae630805ce769f9d4125872862a8c940544ffc1f83af217f2d8875a4cd4784f4a4596afc83c76
- SSDEEP 98304:/GqDm8/rypVIGPhJEuL2oNOF3076h4nNKvV1+h32fHHF4VA9:/G2m0y3IGEu743iLKvVBHF4A
- TLSH T19E06338C74DDA6C5DF69183392AFC28A621B584B9F80E7F2F4737E612E619C70E10D46
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b8035b98e56e0855eb40022e3f041168a051cf4459060dc9f9a2e7444acadef0.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4444 b8035b98e56e0855eb40022e3f041168a051cf4459060dc9f9a2e7444acadef0.exe 4444 b8035b98e56e0855eb40022e3f041168a051cf4459060dc9f9a2e7444acadef0.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\b8035b98e56e0855eb40022e3f041168a051cf4459060dc9f9a2e7444acadef0.exe"C:\Users\Admin\AppData\Local\Temp\b8035b98e56e0855eb40022e3f041168a051cf4459060dc9f9a2e7444acadef0.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4444