Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
31/07/2026, 04:38
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7c4385829b1b2b2a1e8e5bdb474baba9876ed2c1090f8aab18e3da146ce2c318.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
7c4385829b1b2b2a1e8e5bdb474baba9876ed2c1090f8aab18e3da146ce2c318.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 7c4385829b1b2b2a1e8e5bdb474baba9876ed2c1090f8aab18e3da146ce2c318.exe
- Size 996KB
- Sample260731-e9fzbscg44
- SHA256 7c4385829b1b2b2a1e8e5bdb474baba9876ed2c1090f8aab18e3da146ce2c318
- MD5 b777a412d7b9a57456c87a56ecd74a80
- SHA1 c93fc839ee87c478fb846b3315665895236b8628
- SHA512 f7d7fbbbc62b1335de30f87a4f90bd506921ee68ad83cb2c53dbe73998691107980eb42bd91c81cf2461d38435db010a8fcef709a60641c9e3ef051efacbfe7d
- SSDEEP 12288:7It8cEw2XpKds14G+OtG7w1YGHQhfmjcSAIXgT+gV3:7M8zkds1hxtqw1Y3hujqIX4+O
- TLSH T15F257E32E1D3F4B2D6050530356667769A74AE75C52CCE6BA394FE382FF3241DA3620A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 7c4385829b1b2b2a1e8e5bdb474baba9876ed2c1090f8aab18e3da146ce2c318.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 816 7c4385829b1b2b2a1e8e5bdb474baba9876ed2c1090f8aab18e3da146ce2c318.exe 816 7c4385829b1b2b2a1e8e5bdb474baba9876ed2c1090f8aab18e3da146ce2c318.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\7c4385829b1b2b2a1e8e5bdb474baba9876ed2c1090f8aab18e3da146ce2c318.exe"C:\Users\Admin\AppData\Local\Temp\7c4385829b1b2b2a1e8e5bdb474baba9876ed2c1090f8aab18e3da146ce2c318.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:816