Overview
overview
7Static
static
3LuaTools.exe
windows10-2004-x64
6Update.exe
windows10-2004-x64
3current/Co...vm.dll
windows10-2004-x64
1current/LuaTools.exe
windows10-2004-x64
1current/LuaTools.exe
windows10-2004-x64
7current/Ma...pf.dll
windows10-2004-x64
1current/Markdig.dll
windows10-2004-x64
1current/Mi...ns.dll
windows10-2004-x64
1current/Mi...er.dll
windows10-2004-x64
1current/Mi...ne.dll
windows10-2004-x64
1current/Mi...es.dll
windows10-2004-x64
1current/Mi...ns.dll
windows10-2004-x64
1current/Mi...on.dll
windows10-2004-x64
1current/Mi...ts.dll
windows10-2004-x64
1current/Mi...on.dll
windows10-2004-x64
1current/Mi...ns.dll
windows10-2004-x64
1current/Mi...on.dll
windows10-2004-x64
1current/Mi...ns.dll
windows10-2004-x64
1current/Mi...cs.dll
windows10-2004-x64
1current/Mi...ns.dll
windows10-2004-x64
1current/Mi...al.dll
windows10-2004-x64
1current/Mi...ng.dll
windows10-2004-x64
1current/Mi...ns.dll
windows10-2004-x64
1current/Mi...ng.dll
windows10-2004-x64
1current/Mi...ns.dll
windows10-2004-x64
1current/Mi...on.dll
windows10-2004-x64
1current/Mi...le.dll
windows10-2004-x64
1current/Mi...ug.dll
windows10-2004-x64
1current/Mi...og.dll
windows10-2004-x64
1current/Mi...ce.dll
windows10-2004-x64
1current/Mi...ng.dll
windows10-2004-x64
1current/Mi...ns.dll
windows10-2004-x64
1Analysis
- max time kernel
898s - max time network
489s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
20/07/2026, 15:37
Static task
static1
Behavioral task
behavioral1
Sample
LuaTools.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Update.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral3
Sample
current/CommunityToolkit.Mvvm.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
current/LuaTools.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral5
Sample
current/LuaTools.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
current/Markdig.Wpf.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
current/Markdig.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
current/Microsoft.Extensions.Configuration.Abstractions.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
current/Microsoft.Extensions.Configuration.Binder.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
current/Microsoft.Extensions.Configuration.CommandLine.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral11
Sample
current/Microsoft.Extensions.Configuration.EnvironmentVariables.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
current/Microsoft.Extensions.Configuration.FileExtensions.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral13
Sample
current/Microsoft.Extensions.Configuration.Json.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
current/Microsoft.Extensions.Configuration.UserSecrets.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral15
Sample
current/Microsoft.Extensions.Configuration.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
current/Microsoft.Extensions.DependencyInjection.Abstractions.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral17
Sample
current/Microsoft.Extensions.DependencyInjection.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
current/Microsoft.Extensions.Diagnostics.Abstractions.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral19
Sample
current/Microsoft.Extensions.Diagnostics.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
current/Microsoft.Extensions.FileProviders.Abstractions.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral21
Sample
current/Microsoft.Extensions.FileProviders.Physical.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
current/Microsoft.Extensions.FileSystemGlobbing.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral23
Sample
current/Microsoft.Extensions.Hosting.Abstractions.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
current/Microsoft.Extensions.Hosting.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral25
Sample
current/Microsoft.Extensions.Logging.Abstractions.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
current/Microsoft.Extensions.Logging.Configuration.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral27
Sample
current/Microsoft.Extensions.Logging.Console.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
current/Microsoft.Extensions.Logging.Debug.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral29
Sample
current/Microsoft.Extensions.Logging.EventLog.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
current/Microsoft.Extensions.Logging.EventSource.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral31
Sample
current/Microsoft.Extensions.Logging.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
current/Microsoft.Extensions.Options.ConfigurationExtensions.dll
Resource
win10v2004-20260513-en
General
- Target Update.exe
- Size 3.8MB
- Sample260720-s2f61sey2p
- SHA256 b716430004afd2c1d2b8f191332541759f30d49fe19c49f671a241f68c3a468c
- MD5 9c559eb649f6aae84517e8311ce0478d
- SHA1 eb5735184f13c237c28c9b4e4deb8e3b8104e615
- SHA512 80a19e3b298ae7c1c6ff3ba01d5e770b584a782b9f818f8cd86321ebb26a93a98f46cbcaf2db5da31890e37357d40ff4e5a6a61eff163ed1cea06850f03fd0a6
- SSDEEP 49152:V0z1f+viTnGsRHs8jVrr3TZlzW1qmHVpFkSZC:S+v0ntHsOnaH
- TLSH T1E506BF62FF42D0F7C48A0175E42DF37D8636AE558B2A85C396A97C5CACF0270885739E
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Update.exe