Analysis
- max time kernel
148s - max time network
153s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/08/2026, 12:24
Behavioral task
behavioral1
Sample
r.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
General
- Target r.exe
- Size 49KB
- Sample260802-plh4wsaa24
- SHA256 006120a601c06d28c3e99675db0d9a5802b44a92161f8129d23824714c3bbd64
- MD5 b3318adca60025875bc5a2ceab6dfb58
- SHA1 274a704ffddad47e3a3899f2f35eb9220c50713d
- SHA512 4216dbf489b6c7adf50ac12f37b43162e2b7eff1968b25a4bd16d774e0c8d63d6e063ab560f9cc75a14f92a69ee3f59fe78e436c093d6fd0a6970bdff219a5d9
- SSDEEP 768:gJRpwxNXRE8vmYm5HnVUcJBP7I1WDwPP2Uc9mFYeRWSxGiyr44DMUoGg/:gJUxNXRE874HHt78PYmFhoSIL44Deh
- TLSH T12833F13796B1BBE2CF17063A2BBB340E32848F535741974ADD14227B5BE32758199CAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2560-0-0x0000000000E00000-0x0000000000E23000-memory.dmp upx behavioral2/memory/2560-3-0x0000000000E00000-0x0000000000E23000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language r.exe