Analysis
- max time kernel
913s - max time network
482s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-es - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-eslocale:es-esos:windows11-ltsc_2024-x64systemwindows - submitted
02/08/2026, 08:10
Static task
static1
Behavioral task
behavioral1
Sample
MAXON-Start.exe
Resource
win11-20260513-es
2 signatures
900 seconds
Behavioral task
behavioral2
Sample
MAXON-Start.exe
Resource
win11ltsc2024-20260709-es
2 signatures
900 seconds
General
- Target MAXON-Start.exe
- Size 2.1MB
- Sample260802-j2xdkafe57
- SHA256 401f9faccb395921f1d35939d39cf4871a6b70cadedfb2576a0d30ed2e4e7928
- MD5 183e77d9174d5cbf1a8eff7ead94e3aa
- SHA1 10b91ae6ec7aff5f4773e2e9df69e25d3b21e78b
- SHA512 f81b6ecb655d6287537b9cc4cf851a9519d32b698230be48c19af8145b57e27e3ddc99ddf3c41da62355d4fe4744972b189b838d5aba727bb7890e09c22914f2
- SSDEEP 49152:TBzBhGhuqvAOZWbeqk8zgqaKsXYRY6Cy4AhK5Ge1J0q7:VzBhG0qvAOAk8zgqanoRYXy4Ah8
- TLSH T175A5AE32F5A1903AC6330730DE8CB36862FEFEB05A35525762D53E2D2D71583952CAA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language MAXON-Start.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 872 MAXON-Start.exe 872 MAXON-Start.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\MAXON-Start.exe"C:\Users\Admin\AppData\Local\Temp\MAXON-Start.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:872
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:4216
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:2460