Overview
overview
7Static
static
7DNF_SET_AHK/AHK.exe
windows10-2004-x64
3DNF_SET_AHK/AHK.exe
windows11-ltsc_2024-x64
3DNF_SET_AH...HK.exe
windows10-2004-x64
5DNF_SET_AH...HK.exe
windows11-ltsc_2024-x64
5DNF_SET_AH...HK.dll
windows10-2004-x64
5DNF_SET_AH...HK.dll
windows11-ltsc_2024-x64
5DNF_SET_AH...HK.exe
windows10-2004-x64
5DNF_SET_AH...HK.exe
windows11-ltsc_2024-x64
5DNF_SET_AHK/upx.exe
windows10-2004-x64
5DNF_SET_AHK/upx.exe
windows11-ltsc_2024-x64
5DNF_SET_AH...�.html
windows10-2004-x64
3DNF_SET_AH...�.html
windows11-ltsc_2024-x64
3Analysis
- max time kernel
148s - max time network
153s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/07/2026, 01:14
Behavioral task
behavioral1
Sample
DNF_SET_AHK/AHK.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
DNF_SET_AHK/AHK.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
DNF_SET_AHK/SET_AHK.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
DNF_SET_AHK/SET_AHK.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
DNF_SET_AHK/SET_AHK.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
DNF_SET_AHK/SET_AHK.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
DNF_SET_AHK/SET_AHK.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
DNF_SET_AHK/SET_AHK.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
DNF_SET_AHK/upx.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
DNF_SET_AHK/upx.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
DNF_SET_AHK/更多系统软件下载.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
DNF_SET_AHK/更多系统软件下载.html
Resource
win11ltsc2024-20260709-en
General
- Target DNF_SET_AHK/AHK.exe
- Size 412KB
- Sample260730-blsrfahh98
- SHA256 c37d43d92c3ce2a128c78413fa4cb29db51bc57dbac64790b5e8aa7b63eac83b
- MD5 784427fe03b49c97dd924fcc24d7f5c1
- SHA1 a9a86297f71699c3d13c074df1d85f370fc49f30
- SHA512 f7c69e7cc7b8da5d473fca4f9582c45eba974ec95593507becd80f34af18c1145d65100948ffcf043603f421ff02e7008b7a4810c5958b89bc92e9d6c16664a3
- SSDEEP 12288:5NIQAPGsAqY9IMVYd38sJdpQHlGlY8KfTu:uPGSY91VwNJcFMqTu
- TLSH T14494BF1634A188F3CC4284B10AAAAF70BBF7DA30083519D3EBD5DD897E695D19B1E317
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language AHK.exe - Suspicious behavior: EnumeratesProcesses 10 IoCs
pid Process 3928 AHK.exe 3928 AHK.exe 3928 AHK.exe 3928 AHK.exe 3928 AHK.exe 3928 AHK.exe 3928 AHK.exe 3928 AHK.exe 3928 AHK.exe 3928 AHK.exe - Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 3928 AHK.exe 3928 AHK.exe - Suspicious use of SendNotifyMessage 2 IoCs
pid Process 3928 AHK.exe 3928 AHK.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3928 AHK.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\DNF_SET_AHK\AHK.exe"C:\Users\Admin\AppData\Local\Temp\DNF_SET_AHK\AHK.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:3928