Analysis
- max time kernel
148s - max time network
147s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
22/07/2026, 15:01
Behavioral task
behavioral1
Sample
88bbb8f0269f4f4af3c4f21db257ec3d02ca6d8f02baf0ab9044ceca77a9238f.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
General
- Target 88bbb8f0269f4f4af3c4f21db257ec3d02ca6d8f02baf0ab9044ceca77a9238f.exe
- Size 199KB
- Sample260722-sd6f1abn7v
- SHA256 88bbb8f0269f4f4af3c4f21db257ec3d02ca6d8f02baf0ab9044ceca77a9238f
- MD5 9d03a7322913637fad979483c48847a4
- SHA1 ec814219bcffb827361ab831f58c96b1f513bfa4
- SHA512 afd1d4e037eb313764fdecfc99aac92606c1f2e85e38516fe7cf8b610e463d58a030b99d8d50fde2aca53b34908587e7744d9077e8ff1b6b682958d00ed91aa4
- SSDEEP 3072:cgn0Zt4ErO1RRDU1TB3iGllqf0n+7TAhTmdxUJuJ+5HrCqN+0BqDA:ci0T4E4/+F3iGDm0OTkCCuJ+5LCIUDA
- TLSH T1521412E6C3701E50C9DD5C7079DA802AA622F5C1BC898DBBD278814FDD50F81BB2AC9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2428-0-0x0000000000400000-0x0000000000487000-memory.dmp upx behavioral2/memory/2428-2-0x0000000000400000-0x0000000000487000-memory.dmp upx behavioral2/memory/2428-3-0x0000000000400000-0x0000000000487000-memory.dmp upx behavioral2/memory/2428-4-0x0000000000400000-0x0000000000487000-memory.dmp upx behavioral2/memory/2428-5-0x0000000000400000-0x0000000000487000-memory.dmp upx - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 88bbb8f0269f4f4af3c4f21db257ec3d02ca6d8f02baf0ab9044ceca77a9238f.exe