Analysis
- max time kernel
148s - max time network
147s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/07/2026, 12:31
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
XCPUnpack.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
XCPUnpack.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target XCPUnpack.exe
- Size 303KB
- Sample260730-pp4vrsam5v
- SHA256 3ed6511fc01afc969e63ee47ad169d62346f801df7743a0b90dd3329b9c199e4
- MD5 c2f6fccdcb1f2f197aff613ee9b091be
- SHA1 d56fc16d24239b7d4ed2af873f37d04a6ef3653e
- SHA512 fdc2b474d1f81834c741742eebae28ebfa3defbd7c156413eb0d47b2b33a6e3c6d594742c3326cbacd491c7f863f54b13f4db26e9cf95cdf3360e696d03245b4
- SSDEEP 6144:AVAnozZQ5TUHJ3eAPhOpmej1NtxeNsM7cbVlh/E6H3DZWl:AVAFQJ3ZKVOlolRH3DZWl
- TLSH T125649D9C722472EFC857D472CEA82C68FB9178BB831B4643911765DDAA5C89BCF140F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- ConfuserEx .NET packer 3 IoCs
Detects ConfuserEx .NET packer.
resource yara_rule behavioral2/memory/3428-1-0x0000000000C10000-0x0000000000C64000-memory.dmp ConfuserEx behavioral2/memory/3428-3-0x00000000030A0000-0x00000000030BA000-memory.dmp ConfuserEx behavioral2/memory/3428-7-0x0000000008FB0000-0x0000000008FFA000-memory.dmp ConfuserEx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language XCPUnpack.exe