Analysis
- max time kernel
148s - max time network
119s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
03/08/2026, 13:04
Static task
static1
Behavioral task
behavioral1
Sample
DOC-51JEVW.hta
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-51JEVW.hta
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target DOC-51JEVW.hta
- Size 2KB
- Sample260803-qbb39syfja
- SHA256 daa562d33b5cf3bbc198e20b13ed4b7af414ec647b9ea9ea3dcffd0a09e1ca02
- MD5 1a316453e342c0e524925d4f9d6f381c
- SHA1 80d53fd98776432bf2ff54f1a57f8f7f8d4faa7a
- SHA512 79cb4c2a74511d2d21474178aca6e4b0dc613fd533e53c27062c4eeb609889c8cf3674042c8f661f2553c8739d7a1a8b5d55a8ce9b7ccbff9d11f1062480ec30
- TLSH T17E51A9F77B8293D6BC3249AF667F209814940A473365D0F8FA86DC01EF58E5984747E8
- MD5 SHA1 SHA512 TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language mshta.exe
Processes
-
C:\Windows\SysWOW64\mshta.exeC:\Windows\SysWOW64\mshta.exe "C:\Users\Admin\AppData\Local\Temp\DOC-51JEVW.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}1⤵
- System Location Discovery: System Language Discovery
PID:2924
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:1484