Analysis
- max time kernel
164s - max time network
112s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
30/07/2026, 03:42
General
- Target pdf_viewer64.exe
- Size 4.0MB
- Sample260730-d9qcbsbc58
- SHA256 ee1c5196cb526612b387e4db654eac982dc0f74b58faa96f1184832152a1465e
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious behavior: EnumeratesProcesses 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\pdf_viewer64.exe"C:\Users\Admin\AppData\Local\Temp\pdf_viewer64.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/6052-0-0x0000000074312000-0x0000000074313000-memory.dmp
memory/6052-1-0x0000000000890000-0x0000000000C86000-memory.dmp
memory/6052-2-0x0000000005F50000-0x000000000650A000-memory.dmp
memory/6052-3-0x0000000005880000-0x0000000005912000-memory.dmp
memory/6052-5-0x0000000074300000-0x0000000074ABC000-memory.dmp
memory/6052-4-0x00000000057B0000-0x00000000057BA000-memory.dmp
memory/6052-6-0x0000000074300000-0x0000000074ABC000-memory.dmp
memory/6052-7-0x0000000074312000-0x0000000074313000-memory.dmp
memory/6052-8-0x0000000074300000-0x0000000074ABC000-memory.dmp