Analysis
- max time kernel
148s - max time network
143s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/07/2026, 08:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1e76704569239b3b97ecdb5c3a41ec23a14998c99bf8f3f1268a2fa19e8e8a4d.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1e76704569239b3b97ecdb5c3a41ec23a14998c99bf8f3f1268a2fa19e8e8a4d.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 1e76704569239b3b97ecdb5c3a41ec23a14998c99bf8f3f1268a2fa19e8e8a4d.exe
- Size 7.8MB
- Sample260720-j1593sa13m
- SHA256 1e76704569239b3b97ecdb5c3a41ec23a14998c99bf8f3f1268a2fa19e8e8a4d
- MD5 1990ed1d489dce8bc548ebb02563a360
- SHA1 7949c2cd4d03ce71bde9579934f6b1558bf240b4
- SHA512 3744cca8b2a72f3f68c4368d55abdb4d52d6c6a8a5cee813b065861973055fedb556dc648c7b03c738f4749acaf7e1504f7633189b2ac4e815cf5f1cec287531
- SSDEEP 196608:i9mZjtgbGveWw0fothLRvSTbewquX7ijkN9fwkx:pta+FgpSPquLiqfH
- TLSH T13386129359221921C6CE7C7D823BF98861F68973A025AC71FEADB7CE4FE0752550BC81
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 1e76704569239b3b97ecdb5c3a41ec23a14998c99bf8f3f1268a2fa19e8e8a4d.exe - Enumerates system info in registry 2 TTPs 4 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer 1e76704569239b3b97ecdb5c3a41ec23a14998c99bf8f3f1268a2fa19e8e8a4d.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName 1e76704569239b3b97ecdb5c3a41ec23a14998c99bf8f3f1268a2fa19e8e8a4d.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemVersion 1e76704569239b3b97ecdb5c3a41ec23a14998c99bf8f3f1268a2fa19e8e8a4d.exe Key opened \REGISTRY\MACHINE\Hardware\Description\System\BIOS 1e76704569239b3b97ecdb5c3a41ec23a14998c99bf8f3f1268a2fa19e8e8a4d.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\1e76704569239b3b97ecdb5c3a41ec23a14998c99bf8f3f1268a2fa19e8e8a4d.exe"C:\Users\Admin\AppData\Local\Temp\1e76704569239b3b97ecdb5c3a41ec23a14998c99bf8f3f1268a2fa19e8e8a4d.exe"1⤵
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
PID:2764