Overview
overview
7Static
static
5SAK_32bit/SAK.exe
windows10-2004-x64
3SAK_32bit/SAK.exe
windows11-ltsc_2024-x64
3SAK_32bit/...ci.exe
windows10-2004-x64
1SAK_32bit/...ci.exe
windows11-ltsc_2024-x64
1SAK_32bit/...at.exe
windows10-2004-x64
3SAK_32bit/...at.exe
windows11-ltsc_2024-x64
3SAK_32bit/...ck.exe
windows10-2004-x64
1SAK_32bit/...ck.exe
windows11-ltsc_2024-x64
1SAK_32bit/...ol.exe
windows10-2004-x64
1SAK_32bit/...ol.exe
windows11-ltsc_2024-x64
1SAK_32bit/...et.exe
windows10-2004-x64
1SAK_32bit/...et.exe
windows11-ltsc_2024-x64
1SAK_32bit/...cp.exe
windows10-2004-x64
3SAK_32bit/...cp.exe
windows11-ltsc_2024-x64
3SAK_32bit/...ck.exe
windows10-2004-x64
1SAK_32bit/...ck.exe
windows11-ltsc_2024-x64
1SAK_32bit/...el.exe
windows10-2004-x64
7SAK_32bit/...el.exe
windows11-ltsc_2024-x64
7Analysis
- max time kernel
148s - max time network
116s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
01/08/2026, 17:07
Behavioral task
behavioral1
Sample
SAK_32bit/SAK.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
SAK_32bit/SAK.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
SAK_32bit/bin/4nxci.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
SAK_32bit/bin/4nxci.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral5
Sample
SAK_32bit/bin/guiformat.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
SAK_32bit/bin/guiformat.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
SAK_32bit/bin/hacbrewpack.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
SAK_32bit/bin/hacbrewpack.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
SAK_32bit/bin/hactool.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
SAK_32bit/bin/hactool.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
SAK_32bit/bin/hactoolnet.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
SAK_32bit/bin/hactoolnet.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
SAK_32bit/bin/hptnacp.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
SAK_32bit/bin/hptnacp.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
SAK_32bit/bin/renxpack.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
SAK_32bit/bin/renxpack.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
SAK_32bit/bin/squirrel.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
SAK_32bit/bin/squirrel.exe
Resource
win11ltsc2024-20260709-en
General
- Target SAK_32bit/SAK.exe
- Size 1.6MB
- Sample260801-vm34caea24
- SHA256 9f6b8b9b26cb5c6f1d44f8c771f64ee16fa0800331c8ccbc31ebad2e452a834a
- MD5 fba0709e39294680ccecfead574f3a59
- SHA1 a9153aebdc0924f182cf0cf688d90de96f0eed16
- SHA512 e7b0d84f39c6012612abb08adbb60a0cdb53e1288312c5278399d0660771b816e088d7e7636d25f128ed1910bca2e7ec64097c60449b1b429d728f33679920bf
- SSDEEP 24576:SAHnh+eWsN3skA4RV1Hom2KXMmHar/fP1piadgSepsCIBumhbozTX2JNe5:Vh+ZkldoPK8YaTfP1pige65Nhbk
- TLSH T1F775CF0273D5C036FFAA92735B6AF23556BD7D240123852F23D83E7BBE701A1162D662
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SAK.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3612 SAK.exe - Suspicious use of FindShellTrayWindow 3 IoCs
pid Process 3612 SAK.exe 3612 SAK.exe 3612 SAK.exe - Suspicious use of SendNotifyMessage 3 IoCs
pid Process 3612 SAK.exe 3612 SAK.exe 3612 SAK.exe