Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/08/2026, 08:46
Behavioral task
behavioral1
Sample
19e245bec02d322126020b7ab19636d4f686eca09c6c92752ecfea9ddeffa3e1.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
General
- Target 19e245bec02d322126020b7ab19636d4f686eca09c6c92752ecfea9ddeffa3e1.exe
- Size 83KB
- Sample260802-kphv3sygrb
- SHA256 19e245bec02d322126020b7ab19636d4f686eca09c6c92752ecfea9ddeffa3e1
- MD5 c1554e325487111336807e2aa147e65d
- SHA1 befd5cfa19ee99f0740fcf63cec2d5ccb8ac9a65
- SHA512 4fb2dd828495447e80c03496f699769ee216164a34054a571f1f38744aaf41387d03f5b3798d4c8742c6992b93691407f7b5c64b622402ccaa1561c96b1a4065
- SSDEEP 1536:fvPpfcGdQG/ubGqIolEuVgQ1OMlshq/Z9JD4jMdwuqGdpf7VPu:fvV9QG2bGO2u7Ls2Z9JyMdwuNdpf7V2
- TLSH T11283F149E30CE600F11E3AB50983D75C7231BEE26434BF4F20957EB63DB6E2ADA51562
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/5000-0-0x0000000000400000-0x0000000000442200-memory.dmp upx behavioral2/memory/5000-14-0x0000000000400000-0x0000000000442200-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 19e245bec02d322126020b7ab19636d4f686eca09c6c92752ecfea9ddeffa3e1.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 5000 19e245bec02d322126020b7ab19636d4f686eca09c6c92752ecfea9ddeffa3e1.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\19e245bec02d322126020b7ab19636d4f686eca09c6c92752ecfea9ddeffa3e1.exe"C:\Users\Admin\AppData\Local\Temp\19e245bec02d322126020b7ab19636d4f686eca09c6c92752ecfea9ddeffa3e1.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:5000