Analysis
- max time kernel
148s - max time network
134s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/07/2026, 06:13
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NothingSimulator.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
NothingSimulator.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target NothingSimulator.exe
- Size 1.7MB
- Sample260720-gy4blabs5x
- SHA256 31cfc2208d020dfa32d0feca41628f115b43ec8de1171bc4b75057568f51268c
- MD5 e1580a570bfe328a3ff8fcd8e5ad7cfb
- SHA1 a6b695fbc11a7453325bfed62a3e4b1cc56d9c96
- SHA512 4e648f112fbba966963bc016fef9848453e913dc4c7eb121f7bac3a68ea077a4c2fb65558187c21ac5881858e8a07d6a852350008106d637990c773f6b209630
- SSDEEP 49152:TUEVLLDmLLLLLEbgUEVLLDmLLLLLEb5mFCbdgmlEiUEVLLDmLLLLLEbNUEVLLDmg:TUEVLLDmLLLLL8gUEVLLDmLLLLL85mFy
- TLSH T12585089B390527F6F96CC0B6B43E0C878F257DB69294315821DEF62A02FF435862BD52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language NothingSimulator.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Edward_Bowden\NothingSimulator.exe_Url_zu12npjq4xppuoreglpw1mjkgxc1no1h\1.0.0.1\user.config
- Size 1KB
- SHA256 a8d30fa1571f709f489d8b3044377222f22267c932206d008b328312364c86a5
- MD5 020e93283405af602e423079e8304160
- SHA1 277e89c093024c41121312201e7fe019dca82621
- SHA512 dde1d10b9feafd32ba6f3908eefc959b1137e9b779bc3faed739566832dfec0619faacc6820783b2e421b91a22952ef051a56e112c34f519f1c4b08cfcbca305
- TLSH T1AA11041861D1AE6B05636B22D6224745DDB142D7416720A4B4AE32BB9F3098B0B933AA
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Edward_Bowden\NothingSimulator.exe_Url_zu12npjq4xppuoreglpw1mjkgxc1no1h\1.0.0.1\user.config
- Size 929B
- SHA256 a896e366d4a43d95978abfc277bf7ec034410ca588c6743e545c3502a56bb0bb
- MD5 6ae06bb27021b691947cb25de6d88185
- SHA1 cfc199963f5209f94bf9b1be972f3c3c591e35be
- SHA512 b3691ddadc4c1139a101e8dcbab324071eca9189746e791219d511940210ff0bdbf257cd190c3fd5e0cdc510fea42b1e13e4b5fb6aa9cb1f5a0c3a6f59369cc8
- TLSH T11A11481871D1BE6B05636F63D6224704DD7142D781672468B4BE32BB9F3088B078339A
- MD5 SHA1 SHA512 TLSH