Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/07/2026, 07:48
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SETUP.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
SETUP.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target SETUP.exe
- Size 4.0MB
- Sample260720-jnml7sdt5v
- SHA256 449922b94da9f0c67f5d08eb45caf64225338e8904a7a6a83dde3e1bc4cc736d
- MD5 441eb23331036c83728947a992d283fc
- SHA1 b4fc03620d24fcb42c0f16a767ce8d8eba2d06ae
- SHA512 3b23540cf8c88fa95729efae61d0f322e36e7c9b1b14c2442f8b139bfe1c2846377d11ffaf22c9c6ab99ed3b7ac8a48862f7399464a0110c753c0c4f5abd19d7
- SSDEEP 98304:M7tgDJF4oTxuMIXgocrtnz24lIUp01moRFLOAkGkzdnEVomFHKnP:M7gF4oTzsUp015FLOyomFHKnP
- TLSH T18F169EE13EA8885AD0130F316AD8EA79E17E6D60172B068713D0FE3DFE352416715DAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SETUP.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2688 SETUP.exe 2688 SETUP.exe