Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
03/08/2026, 15:54
Behavioral task
behavioral1
Sample
220e1e2a015b29513c4e89470254beb8313acd1ec8c42d378e659b45dd33bcc9.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
General
- Target 220e1e2a015b29513c4e89470254beb8313acd1ec8c42d378e659b45dd33bcc9.exe
- Size 332KB
- Sample260803-tb6jnavsft
- SHA256 220e1e2a015b29513c4e89470254beb8313acd1ec8c42d378e659b45dd33bcc9
- MD5 a70d6d416656a9e7d187b0782fb8ea10
- SHA1 f9d07fe6fdf15a3647f141affd0bfa8f3d14b8e0
- SHA512 299fc028dac23373b3feb1a783554ccbf851c5d719be09c0693922faa64422c522048203c82207be594f697baf209a3887b4a057370210b5dc8a7abf203e12e8
- SSDEEP 3072:F7BsS3lLyONgeYLccI64UlYuvCm6wwhMdwuNdpf7VRRUUj:dBsSRyQIcY3doMWIZ7f
- TLSH T13E749E33B5D0C4F2D12222321DE14B39BAFCEA311DA246239794EFBA7E355528B1F156
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/4496-0-0x0000000000400000-0x0000000000453000-memory.dmp upx behavioral1/memory/4496-13-0x0000000000400000-0x0000000000453000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 220e1e2a015b29513c4e89470254beb8313acd1ec8c42d378e659b45dd33bcc9.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4496 220e1e2a015b29513c4e89470254beb8313acd1ec8c42d378e659b45dd33bcc9.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\220e1e2a015b29513c4e89470254beb8313acd1ec8c42d378e659b45dd33bcc9.exe"C:\Users\Admin\AppData\Local\Temp\220e1e2a015b29513c4e89470254beb8313acd1ec8c42d378e659b45dd33bcc9.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4496
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\Bugreport_error.ini
- Size 247B
- SHA256 29daf28130932297ff502e1fce6a99afd10166fe802ed8924ab3941d956e6478
- MD5 433af4114075016237579411b41fef4a
- SHA1 2bc10983dccc2cb6130df638022e9e30179f7005
- SHA512 2fa216cb8703458cad8b552e962b7b3514ae7e6a2570218e9a17aa851fbea2a813675a9d77477f4f79f5217649057b901551229e838444b37999bddb4e91591f
- TLSH T16AD05B1F903C91371F3990CB20524596716A0B6CA21D08A3322086DD1E60CB355F3319
- MD5 SHA1 SHA512 TLSH