Analysis
- max time kernel
148s - max time network
115s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
04/08/2026, 06:00
General
- Target afc9b8818a4e8bf0d8759b396cc4b3988606a5d194a76b8df52231d19d130611.exe
- Size 197KB
- Sample260804-gqphgaxtfy
- SHA256 afc9b8818a4e8bf0d8759b396cc4b3988606a5d194a76b8df52231d19d130611
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious behavior: EnumeratesProcesses 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\afc9b8818a4e8bf0d8759b396cc4b3988606a5d194a76b8df52231d19d130611.exe"C:\Users\Admin\AppData\Local\Temp\afc9b8818a4e8bf0d8759b396cc4b3988606a5d194a76b8df52231d19d130611.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4768-0-0x00000000745F2000-0x00000000745F3000-memory.dmp
memory/4768-1-0x00000000025E0000-0x0000000002604000-memory.dmp
memory/4768-2-0x00000000745E0000-0x0000000074D9C000-memory.dmp
memory/4768-3-0x0000000004C30000-0x00000000051EA000-memory.dmp
memory/4768-4-0x00000000026C0000-0x00000000026E2000-memory.dmp
memory/4768-5-0x00000000745E0000-0x0000000074D9C000-memory.dmp
memory/4768-118-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-131-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-179-0x00000000745E0000-0x0000000074D9C000-memory.dmp
memory/4768-178-0x0000000005220000-0x00000000052BC000-memory.dmp
memory/4768-129-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-127-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-125-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-123-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-121-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-115-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-111-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-109-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-107-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-105-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-103-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-101-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-97-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-95-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-93-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-91-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-89-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-87-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-85-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-83-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-81-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-79-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-77-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-75-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-71-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-69-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-67-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-65-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-63-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-61-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-59-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-57-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-55-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-53-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-51-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-49-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-45-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-41-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-43-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-39-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-37-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-35-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-33-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-31-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-29-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-27-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-25-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-22-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-19-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-15-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-13-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-11-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-9-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-7-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-6-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-119-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-113-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-100-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-73-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-47-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-23-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-18-0x00000000026C0000-0x00000000026DD000-memory.dmp
memory/4768-180-0x00000000058F0000-0x0000000005982000-memory.dmp
memory/4768-181-0x00000000745E0000-0x0000000074D9C000-memory.dmp
memory/4768-182-0x0000000005C80000-0x0000000005C8A000-memory.dmp
memory/4768-183-0x00000000745F2000-0x00000000745F3000-memory.dmp
memory/4768-184-0x00000000745E0000-0x0000000074D9C000-memory.dmp
memory/4768-185-0x00000000745E0000-0x0000000074D9C000-memory.dmp