Analysis
- max time kernel
150s - max time network
135s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
03/08/2026, 13:02
Static task
static1
Behavioral task
behavioral1
Sample
DOC-9JQB7S.hta
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-9JQB7S.hta
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target DOC-9JQB7S.hta
- Size 2KB
- Sample260803-p973xsbn21
- SHA256 5115c5c065872181ff3994f1060c8985bc36fa20db14b15e371fdff4277d66e8
- MD5 54759b699b5d9d828707408945ed6848
- SHA1 bbb1065a1cf8e095f92721a48292cbd2b9e16c03
- SHA512 733ee7a317ef912a1a97d521524bd2b831d29ae7faee448b86a65f6bfe4c448022f2961884a889800bf5c46dcb4c22a54b130225b5aae4609f5d14846d41a69b
- TLSH T12851D9EBB98617D1BC325AAF5A7F109E14D416031365E4F8F38ADD00AF98E0D91783E8
- MD5 SHA1 SHA512 TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language mshta.exe
Processes
-
C:\Windows\SysWOW64\mshta.exeC:\Windows\SysWOW64\mshta.exe "C:\Users\Admin\AppData\Local\Temp\DOC-9JQB7S.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}1⤵
- System Location Discovery: System Language Discovery
PID:5776
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:5272