Analysis
- max time kernel
150s - max time network
134s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/07/2026, 12:27
Behavioral task
behavioral1
Sample
eset-all-version-uninstaller.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
eset-all-version-uninstaller.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target eset-all-version-uninstaller.exe
- Size 1.1MB
- Sample260730-pmvjbaxepa
- SHA256 11f8be588cfbaf9faa5ce9e65161bd3814be4d1439524af0e5bb88044353a3bc
- MD5 8c8ebbb93525a5e81f6e511ce547c671
- SHA1 d1ed2795099214bd738eb149be5fdd8cd7eba333
- SHA512 4d7a7fa0d08ee3195699566326e827ead86021ec26acafcc5be5e653c3c8d6770ac7ca8024dab3a88035f3321d30bddd9f400f7fddd41b29e710eb16d55a40f3
- SSDEEP 24576:cgx7VJsB2+u3OC1+AF+Cverf9VQ3sdpsvCkADmPjauMmmmmmqmmmmcumgm7zZu8O:cmVJD+4OS+AMCWO8kvsmPjauMmmmmmqN
- TLSH T1A935CE2922C5C5F1F4EABABBC4064CF7964D7D0DE724499B4368BFBB7A3B491420B805
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- AutoIT Executable 4 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule behavioral2/memory/5076-2-0x0000000000F30000-0x0000000001104000-memory.dmp autoit_exe behavioral2/memory/5076-1-0x0000000000F30000-0x0000000001104000-memory.dmp autoit_exe behavioral2/memory/5076-3-0x0000000000F30000-0x0000000001104000-memory.dmp autoit_exe behavioral2/memory/5076-4-0x0000000000F30000-0x0000000001104000-memory.dmp autoit_exe - System Location Discovery: System Language Discovery 1 TTPs 3 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language eset-all-version-uninstaller.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Language eset-all-version-uninstaller.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\Nls\Language\InstallLanguage eset-all-version-uninstaller.exe