Analysis
- max time kernel
148s - max time network
143s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/07/2026, 04:09
Behavioral task
behavioral1
Sample
a21ed03f6f64353e2e00fb90d41c73309d88ef8098c632b7623afd6c72a70e68.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
General
- Target a21ed03f6f64353e2e00fb90d41c73309d88ef8098c632b7623afd6c72a70e68.exe
- Size 83KB
- Sample260724-eq7ypsed52
- SHA256 a21ed03f6f64353e2e00fb90d41c73309d88ef8098c632b7623afd6c72a70e68
- MD5 41c5056a6f3788e2d9b0ea1d5af350d0
- SHA1 3920419c86d237ca1dff1baf0a1826bb99413846
- SHA512 ea325f3b98c104da30304691bd299de7a8d7a381c19b2233571da0d58c60513bfbab9798df1aa711b32b54c81bdd1730b869a954db32df491fc8423694a258fb
- SSDEEP 1536:e0pnl5DKJEpFYj2lLkDxEWIqsocBz3766MdwuqGdpf7VPf:e05PKJMc2lLwxEtqkZrzMdwuNdpf7VH
- TLSH T12283F202E8F0E805D6597B729083D2BF79293CC8836B1A5718C07DBA7BF5D825D65E0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4180-0-0x0000000000400000-0x0000000000442200-memory.dmp upx behavioral2/memory/4180-14-0x0000000000400000-0x0000000000442200-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language a21ed03f6f64353e2e00fb90d41c73309d88ef8098c632b7623afd6c72a70e68.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4180 a21ed03f6f64353e2e00fb90d41c73309d88ef8098c632b7623afd6c72a70e68.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\a21ed03f6f64353e2e00fb90d41c73309d88ef8098c632b7623afd6c72a70e68.exe"C:\Users\Admin\AppData\Local\Temp\a21ed03f6f64353e2e00fb90d41c73309d88ef8098c632b7623afd6c72a70e68.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4180
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\Bugreport_error.ini
- Size 140B
- SHA256 3b101128b7054e00030ed3ea4e02ff5a27af3a09ef35a7ff6d927ac1e8132607
- MD5 25965ae8faa5c48bca62dbff5f5b15e5
- SHA1 e550929872c6611bbe0d13e19b490d4b672931ea
- SHA512 6181f68956c9ebdc6905a00eb48bd705037469b22e28217e1d81bde0870230c34c9ba67ac14f5b737fa2377b0a06b76e8c9ffcf45b57306abbaaea33cc30197b
- TLSH T17FC09B2FCF18E5230F1F71FC60970E80346AE76C846B993373202F5456C8D1B5446759
- MD5 SHA1 SHA512 TLSH