Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
28/07/2026, 18:27
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AugurMS.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
AugurMS.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
dinput8.dll
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
dinput8.dll
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target dinput8.dll
- Size 2.7MB
- Sample260728-w3vycaer2x
- SHA256 1c0835181b529cfd7cea720688b294e6ae0cce83d72ebacbda003aeb7262a61a
- MD5 c4b8251dd950f70e2ea1a32ad3b76e03
- SHA1 28cc7ce4102f8651d43445639558a4069c4436dd
- SHA512 4579092ba0e4fc737c3f1a890b8a06c3dd1bf13b1a97371542f0970ef361e11f6743942fb0317b5d523e0c1009fae36c493e38d870ead03e315d231f00e47d0f
- SSDEEP 49152:2kfLY8q8ai9MF+aLVu5VqFeYgEEFb3kfLY8q8ai9MF+aLVu5VqFeYgEEFb3Fe:2kjY8qw9MF+WVuWcYgEUYjY8qw9MF+WE
- TLSH T15CD51208D1E1D554FCD7107E0AA42B93D323A0BBC65209CBB661A58C9C67CF98B758BF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 5064 wrote to memory of 940 5064 rundll32.exe 88
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\dinput8.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:5064 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\dinput8.dll,#12⤵
- System Location Discovery: System Language Discovery
PID:940
-