Analysis
- max time kernel
150s - max time network
136s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
23/07/2026, 12:30
Behavioral task
behavioral1
Sample
LottiplayT.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
General
- Target LottiplayT.exe
- Size 3.3MB
- Sample260723-ppzaaayfjd
- SHA256 ebddf194fee3450a24af7d15b82aa4bf91977b28296f6ccbac180c79a5364f97
- MD5 a3fa217e89ed483281e822b74f34ec76
- SHA1 10369d6a116cc8f948ff730ae9273c2f96d49357
- SHA512 c236f6fd30a439bcebfdefba9347dcfc51bfd46848bc4a016504178f181ad1291a947b341c9638a5bb8aa94b0484add0fbdc5998ded0fa0614786c32d65c0536
- SSDEEP 98304:csL92hnaUQZuKihhIVPAaW1EDLVt2GnTF36:jL92hnXwinaBvVDnJ
- TLSH T1AEF5335F6E67573BD0AB33F519BAF51296C76C1C32D82B2AD3143EAF483D3566020A12
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/1148-0-0x0000000000400000-0x0000000000C5B000-memory.dmp upx behavioral2/memory/1148-2-0x0000000000400000-0x0000000000C5B000-memory.dmp upx behavioral2/memory/1148-4-0x0000000000400000-0x0000000000C5B000-memory.dmp upx behavioral2/memory/1148-8-0x0000000000400000-0x0000000000C5B000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language LottiplayT.exe