Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
03/08/2026, 14:55
Behavioral task
behavioral1
Sample
acid drop.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
server.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
General
- Target acid drop.exe
- Size 188KB
- Sample260803-sapdbatthw
- SHA256 b0eb82dad0a54c907da1c3c3e7b830b35a089cf33e511a334cb4264f0c5e3f38
- MD5 9a14dd2cad68190f6901f0cd1e462945
- SHA1 6b068a8eeb85249ca11dab0c9d89895b9d8591e5
- SHA512 bc9139cc5efcd20de49aa67b6501e7b12f28466c974f55511bfa70deea5c38d6a0bf63a0d6a0dafcbf468dc5a0624123787aa20eb0d73d1bfd2d126938189e2f
- SSDEEP 3072:tP2h3twh/3/2yJdQkYC62fjNHji5SXsZsEyu6fRWchr:Ah3ryJN7pHji5SXsZVyu6fRWch
- TLSH T14B1419229EBC1982EED31A330BF2DE7556347C8512235F8BA734BB0D1476A82196573F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language acid drop.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 620 acid drop.exe