Analysis
- max time kernel
149s - max time network
146s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
18/07/2026, 10:46
Behavioral task
behavioral1
Sample
cb28e92b8f227eb7312186ea7f2fdcfea0e47da6fe238aa5441b8cbe441dd4b6.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
General
- Target cb28e92b8f227eb7312186ea7f2fdcfea0e47da6fe238aa5441b8cbe441dd4b6.exe
- Size 2.0MB
- Sample260718-mt89yab18v
- SHA256 cb28e92b8f227eb7312186ea7f2fdcfea0e47da6fe238aa5441b8cbe441dd4b6
- MD5 05c4d14366837aa58e2076eb2d811541
- SHA1 0df1530ea525eabf88ca6592f1e9c4ec6e4560e1
- SHA512 10222a65e13cc0157b453a90717dd04e839f1b2202758e26c4eab8fec05ed414d2d807ed28ca648326307af815a045ed3cc3aa77e93ce303615b8c0f67abc025
- SSDEEP 49152:tVPn0eA90h9Z3eBh4h9WB5J3Yn1qp+612282G3:Hs9IL3eMhs/o1q5oKI
- TLSH T169953311C285FFB6C1137C348EA745B7B1FE9A80BEEB379D928F02603785215790653A
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/4384-0-0x0000000000400000-0x00000000008C5000-memory.dmp upx behavioral1/memory/4384-6-0x0000000000400000-0x00000000008C5000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cb28e92b8f227eb7312186ea7f2fdcfea0e47da6fe238aa5441b8cbe441dd4b6.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4384 cb28e92b8f227eb7312186ea7f2fdcfea0e47da6fe238aa5441b8cbe441dd4b6.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\cb28e92b8f227eb7312186ea7f2fdcfea0e47da6fe238aa5441b8cbe441dd4b6.exe"C:\Users\Admin\AppData\Local\Temp\cb28e92b8f227eb7312186ea7f2fdcfea0e47da6fe238aa5441b8cbe441dd4b6.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4384