Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
23/07/2026, 12:30
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
QAnetActualizador.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
QAnetActualizador.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
General
- Target QAnetActualizador.exe
- Size 116KB
- Sample260723-ppynrayera
- SHA256 c648260e8fd449844405830430e1d0bd7c4b8ec45b7ab5afa1b3dfedbd698f89
- MD5 7db0839ce0ecc394008af6ad7e54b973
- SHA1 5f89a84457a847649086509a8209bf32f51a453f
- SHA512 92be3d2200c651041becd0c3ed7cb478c9f353b933e90506279fb099dff90f12126694711b9c4a66bb1405c565edd45158b62258d021c7cf71d6c77b23d24d40
- SSDEEP 1536:+jFMWfZW555Ti1n7nDcjB54o+K76xS6I/Qn3OacJy/hJETMWfZ:+RjW5LQDDC4o+K76A6I/Qn3OaczTj
- TLSH T1F3C3E923FBB1B11AE243C5B52A18D2AE69163E310D50AD4BF3827F4A25715D3B5F4B0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language QAnetActualizador.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4164 QAnetActualizador.exe