Analysis
- user interaction
yes - max time kernel
4s - max time network
9s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
04/08/2026, 08:40
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
GGSVT.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
GGSVT.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
General
- Target GGSVT.exe
- Size 2.8MB
- Sample260804-kk7nms1wcx
- SHA256 70b7d84dde47dff296498bd280f8084cefa66127e8f796a89d45852d5eb4f383
- MD5 8122e8c4fa2ef1c2bfe99ed2477b91a3
- SHA1 22570c2168bf46c46c3db62f47818cbce755ce4a
- SHA512 8e9f016bf85ca9e293b3c061358b229c3f64d383c28a8ade955b6c6480566c0ca0f3b008a6153e7f0f4c714b81e970c0b3a1870c25d200c63ac365c584051d41
- SSDEEP 49152:auKWRjuCkAIKyo+HgbY8DkRmaZ8V7Fy1t21Rm:atWwA7yB4O23m
- TLSH T15ED54B147ED4EB27C16BCE33D5D24011E3F1E5A32AB1EB0E66D79798184234678863AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
pid Process 2384 GGSVT.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language GGSVT.exe - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS GGSVT.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer GGSVT.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemVersion GGSVT.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\CreativeEAXSetting\VoicemeeterRemote.dll
- Size 156KB
- SHA256 5d85a8e00c714a707a65671936fb49611f4e7751a9065c618804ed5ca47872cb
- MD5 79b4ef6b17d0a8bb825437773c1d8e3f
- SHA1 255fbeb8ad45faad93afeac2afa2cb7e7d78d079
- SHA512 0c76b45b3c311f34de0087755d63e7966edf24ad77360897475854ff66421ce55e93f35a78ea10f15cce8ccc505618d12dd6114eabc89b73a1e468f5b16799f9
- SSDEEP 3072:+cvA+X1yaikOLqMvbJl1rvVygoP5UG7GjSVX:PYH1rtyrQjS5
- TLSH T1E6F3AF1376D240F6D5813EBD14E7373BEF3AAA5648668E438B98DD521C31352BB2620F
- MD5 SHA1 SHA512 SSDEEP TLSH