Analysis
- max time kernel
150s - max time network
152s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
07/08/2026, 07:17
General
- Target a1353f815c0f7d8c4db482ea15ca1de63d09f6ebb5ec754ad6eb08ba98c7ae69.exe
- Size 14.0MB
- Sample260807-h4wpdaef32
- SHA256 a1353f815c0f7d8c4db482ea15ca1de63d09f6ebb5ec754ad6eb08ba98c7ae69
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of SetWindowsHookEx 12 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a1353f815c0f7d8c4db482ea15ca1de63d09f6ebb5ec754ad6eb08ba98c7ae69.exe"C:\Users\Admin\AppData\Local\Temp\a1353f815c0f7d8c4db482ea15ca1de63d09f6ebb5ec754ad6eb08ba98c7ae69.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3736-0-0x0000000000FC1000-0x0000000000FC2000-memory.dmp
memory/3736-3-0x0000000001470000-0x0000000001471000-memory.dmp
memory/3736-1-0x00000000013D0000-0x00000000013D1000-memory.dmp
memory/3736-7-0x00000000014B0000-0x00000000014B1000-memory.dmp
memory/3736-10-0x0000000003170000-0x0000000003171000-memory.dmp
memory/3736-15-0x00000000031C0000-0x00000000031C1000-memory.dmp
memory/3736-19-0x0000000003210000-0x0000000003413000-memory.dmp
memory/3736-23-0x0000000003210000-0x0000000003413000-memory.dmp
memory/3736-16-0x00000000031D0000-0x00000000031D1000-memory.dmp
memory/3736-24-0x0000000003210000-0x0000000003413000-memory.dmp
memory/3736-14-0x00000000031B0000-0x00000000031B1000-memory.dmp
memory/3736-13-0x00000000031A0000-0x00000000031A1000-memory.dmp
memory/3736-17-0x00000000031F0000-0x00000000031F1000-memory.dmp
memory/3736-2-0x0000000001460000-0x0000000001461000-memory.dmp
memory/3736-12-0x0000000003190000-0x0000000003191000-memory.dmp
memory/3736-11-0x0000000003180000-0x0000000003181000-memory.dmp
memory/3736-9-0x0000000003160000-0x0000000003161000-memory.dmp
memory/3736-8-0x0000000003150000-0x0000000003151000-memory.dmp
memory/3736-6-0x00000000014A0000-0x00000000014A1000-memory.dmp
memory/3736-5-0x0000000001490000-0x0000000001491000-memory.dmp
memory/3736-4-0x0000000001480000-0x0000000001481000-memory.dmp
memory/3736-25-0x0000000000400000-0x0000000001228000-memory.dmp