Analysis
- max time kernel
148s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
04/08/2026, 02:38
Behavioral task
behavioral1
Sample
Synaptics蠕虫专杀.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
General
- Target Synaptics蠕虫专杀.exe
- Size 1.2MB
- Sample260804-c482taep6z
- SHA256 c158460bf09c36219d35adf5d78d1598c9a983ea65df905f785b98ca4c2213ec
- MD5 1a8df8850b555776f51966da3c6a110a
- SHA1 bc5706268c528f22aa35fe2261fa1cb62347597e
- SHA512 1728870fc0bbd7d3f6a1f12e66a7014d643d4211cbf57ec2dfd10979170744a1d053c9c9506dc69c069b5428e50587c58940aa37a74612c38d5cf6c4464f5c5f
- SSDEEP 24576:Oc0siBP/aRVTI/ffDglXOmV3csLCYaFeDRbJuqkMJ3UAbr/87Bb:OcPi+M/fIX4sWY75JnkM2cr/k
- TLSH T137453388B384CD4ACE2B583BFFBCA4ED278B9E95C48157B748843D4D2C77A0129567B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/5056-0-0x0000000000400000-0x0000000000437000-memory.dmp upx behavioral2/memory/5056-2-0x0000000000400000-0x0000000000437000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Synaptics蠕虫专杀.exe