Analysis
- max time kernel
149s - max time network
126s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
16/07/2026, 04:26
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0eb7f4faee713aee73037181c46739fd104ff4dacb7b835d0e6afc4cf2e988aa.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
0eb7f4faee713aee73037181c46739fd104ff4dacb7b835d0e6afc4cf2e988aa.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
General
- Target 0eb7f4faee713aee73037181c46739fd104ff4dacb7b835d0e6afc4cf2e988aa.exe
- Size 84KB
- Sample260716-e2p72acz6l
- SHA256 0eb7f4faee713aee73037181c46739fd104ff4dacb7b835d0e6afc4cf2e988aa
- MD5 b6c2e2cc1b1faff97f5e8885fdac0a0a
- SHA1 098e49b1bca1b6b42261059bb96a0616c2a7503b
- SHA512 267d10a8c53f96d09b2cb18b57b7794b230957b46403f5c45a1f08c2c842aa417a498f8bd55bef7f55f2dc9fe50cd57c9bea697317a6e8505e50d86ec75d04ef
- SSDEEP 768:ILU1MGJUd/ipmza4xTMXY2kir8r4YcrRHfdiladRdAhkmE8ed:h1MGutcZfdzdRdWkmE8ed
- TLSH T1998319019BF76CB8F9F258302C1EF27E0872FE358834C69C569458798E75BD1A662732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 0eb7f4faee713aee73037181c46739fd104ff4dacb7b835d0e6afc4cf2e988aa.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 740 0eb7f4faee713aee73037181c46739fd104ff4dacb7b835d0e6afc4cf2e988aa.exe 740 0eb7f4faee713aee73037181c46739fd104ff4dacb7b835d0e6afc4cf2e988aa.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\0eb7f4faee713aee73037181c46739fd104ff4dacb7b835d0e6afc4cf2e988aa.exe"C:\Users\Admin\AppData\Local\Temp\0eb7f4faee713aee73037181c46739fd104ff4dacb7b835d0e6afc4cf2e988aa.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:740