Analysis
- max time kernel
148s - max time network
115s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
22/07/2026, 14:56
Behavioral task
behavioral1
Sample
eea7ca0f2b2602a00ccf0ed71acc85d61a789b05e5b0a875f458a78cddbc9ffc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
General
- Target eea7ca0f2b2602a00ccf0ed71acc85d61a789b05e5b0a875f458a78cddbc9ffc.exe
- Size 612KB
- Sample260722-sbdcfabm9y
- SHA256 eea7ca0f2b2602a00ccf0ed71acc85d61a789b05e5b0a875f458a78cddbc9ffc
- MD5 dc00fbac4caa16c622044a7e28bde846
- SHA1 5e4dc3e6b3b17f596f6b7337d0db5e746beebb5a
- SHA512 55855d8f92343d0fd0f0aeb7288830eab65ad06151eaa0d6e84fc5c7b95142396c4058e95873b40d42eb5dacd29847f1fa95af926b600f382562a666d9d707f0
- SSDEEP 12288:xnNhuBoY8SorxgmA+nlvVlgn9s8L/xKgCO9s8L/xKgCs9s8L/xKgCvpD5bnzZ1uA:xPatCg7EPc9s8tdX9s8tdZ9s8tdcB9nj
- TLSH T132D4236B98D5AAACFC12133312D61F35FFA2E4B93D72921C12352A4FDC6ED460DB1294
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule behavioral2/memory/5472-3-0x0000000000400000-0x0000000000496000-memory.dmp autoit_exe -
resource yara_rule behavioral2/memory/5472-0-0x0000000000400000-0x0000000000496000-memory.dmp upx behavioral2/memory/5472-3-0x0000000000400000-0x0000000000496000-memory.dmp upx - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language eea7ca0f2b2602a00ccf0ed71acc85d61a789b05e5b0a875f458a78cddbc9ffc.exe