Overview
overview
7Static
static
3Labyrinth_WIN.exe
windows10-ltsc_2021-x64
7$PLUGINSDI...em.dll
windows10-ltsc_2021-x64
3$PLUGINSDI...gs.dll
windows10-ltsc_2021-x64
3$TEMP/dxwebsetup.exe
windows10-ltsc_2021-x64
7D3DX9_43.dll
windows10-ltsc_2021-x64
3Labrynth_24.exe
windows10-ltsc_2021-x64
3uninstall.exe
windows10-ltsc_2021-x64
7Analysis
- max time kernel
149s - max time network
141s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
16/07/2026, 04:25
Behavioral task
behavioral1
Sample
Labyrinth_WIN.exe
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/System.dll
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral4
Sample
$TEMP/dxwebsetup.exe
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral5
Sample
D3DX9_43.dll
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral6
Sample
Labrynth_24.exe
Resource
win10ltsc2021-20260513-en
General
- Target Labrynth_24.exe
- Size 3.0MB
- Sample260716-e1646acz4k
- SHA256 14d9567961fe5d95b24f35f17a23a8d587f8fb85707fe3f9c3c72eb82d7dac32
- MD5 b100c3c2d8394693509ee08a90892d0e
- SHA1 b56953b872ea3767311836c841cca4f0afe0ebd5
- SHA512 08dc1d7c2c5b51a6797153c0ae98ee0ff7979caaf77fdb82bcc4532696e8ec5df5b31d53ec508a76dffa8ddbcf6595431dbabd82f801a022715290a74f7d434d
- SSDEEP 49152:fXah6xXWi7vYtxYJnuEN1dKqt81yByouF4UhXAtG9MGTGD:ZWmvYt2RdKqtcyByouhhXAt+MtD
- TLSH T165E58E407281D0B1E44161F8AC5AE6EF46297F61872895EFB7D03F1A6A776E01EB33C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Labrynth_24.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4576 Labrynth_24.exe