Overview
overview
8Static
static
36e22a8ca94...06.exe
windows10-2004-x64
36e22a8ca94...06.exe
windows11-ltsc_2024-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...in.dll
windows10-2004-x64
3$PLUGINSDI...in.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...86.dll
windows10-2004-x64
8$PLUGINSDI...86.dll
windows11-ltsc_2024-x64
3Analysis
- max time kernel
150s - max time network
153s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
03/08/2026, 16:25
Static task
static1
Behavioral task
behavioral1
Sample
6e22a8ca94ad43e4c455d45ddda32106.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
6e22a8ca94ad43e4c455d45ddda32106.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/FileInfo.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/FileInfo.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/RCWidgetPlugin.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/RCWidgetPlugin.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/libcurl_x86.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/libcurl_x86.dll
Resource
win11ltsc2024-20260709-en
General
- Target 6e22a8ca94ad43e4c455d45ddda32106.exe
- Size 2.0MB
- Sample260803-txbleavxdv
- SHA256 52f508609094e6d6ef6b8be1f78a7fec1ef5d4cf62e6675f87d0a9eb37a8d289
- MD5 6e22a8ca94ad43e4c455d45ddda32106
- SHA1 50f21a80daba3e9026e0a1acc3d30ce0be8a0763
- SHA512 d68a60723bd8f3dc81d353906fc1f37576cc3eab10b5ebbf100580357ae9542403e00a32d72d5991807cfb3f602d754ebd86ef4cb8130e233a30d9c356557bdf
- SSDEEP 49152:k9v0Aax3sthlQZtL9JgSldetJIjoudVSoBmywlSAW:623kQpuSloLzudVbMY
- TLSH T175A53300D501C8C7DE916832B09EA6D746769C62B75935CFE399BB83AEE17F188B1370
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 6e22a8ca94ad43e4c455d45ddda32106.exe