Analysis
- user interaction
yes - max time kernel
64s - max time network
50s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/08/2026, 10:26
Behavioral task
behavioral1
Sample
Алекс Гордон.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
General
- Target Алекс Гордон.exe
- Size 25.9MB
- Sample260802-mglm4sgf87
- SHA256 956d4eacd9b17c9369d4bdffb66e73b30168a5ba74fcd7f07bb4ec16bf109d76
- MD5 bacd0e23b23b0eebe4f8e9da0877f05a
- SHA1 dd16b7257a3087ce8a4696b85b5e6fe9a44553d4
- SHA512 e8080ddd984d21acfad5421e9fbfa2f06baec1978ff4a43a4dcd9fcbbeda020a8f59e833e1ad457d4cd07558182582324a1307f533a62c5ab094393fd0680b7a
- SSDEEP 393216:HNlzSaqmrIoiFY4wRt9qymItfRunxvQYZPNtL1YORtG3CGBVHyakkh+TENHGaMzm:H5qmkoiSht9x3axoq+OUCIFyjERGaF
- TLSH T192573383E4107FBEDA29CF71B5344AB01E362C7F45167A316AEE717D08A41168932F6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Алекс Гордон.exe - Inno Setup is an open-source installation builder for Windows applications. 2 IoCs
Inno Setup installer
resource yara_rule behavioral2/memory/2580-2-0x0000000000400000-0x000000000045B000-memory.dmp innosetup behavioral2/memory/2580-3-0x0000000000400000-0x000000000045B000-memory.dmp innosetup