Analysis
- max time kernel
26s - max time network
29s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
24/07/2026, 01:05
Static task
static1
Behavioral task
behavioral1
Sample
ffproq413x64.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
ffproq413x64.exe
Resource
win10ltsc2021-20260513-en
2 signatures
150 seconds
General
- Target ffproq413x64.exe
- Size 10.8MB
- Sample260724-bfzb2ael91
- SHA256 ff56cf73d378c3dcbd96f0254920cff106d51786c5ac139ed73fe8d22161773b
- MD5 457e73308d03064ade31a552c6735e95
- SHA1 94731c3630b75f9f35f0eae6e71e5e907523a950
- SHA512 136eeeda99c9451960c2cfe9fb4be5c8c48b2ebc9eff05519c34fbc27721410460fd8b90f342451d87bf81e94cc7e2d3073f1ae9e1becd742fe579b78b1cfdab
- SSDEEP 196608:iOzXU71HnHVVdPGLSaiL9FDilyFH1iHsCAkLC/JAI566lYBZsTLbzpGLyBv2zXyn:ia+HnH7dfFelymAJAUXlYB2ZMyJ2jqE
- TLSH T1C9B62201E7A0C87EE1190677D81AA2213D55FB41D57E982F16B939086DB33C329BFE4E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ffproq413x64.exe