Analysis
- max time kernel
149s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
07/08/2026, 09:56
Behavioral task
behavioral1
Sample
e1bb7705010f0d11f6ba8313a55f19e811c9263138c3a924026b23d2ee3afa5d.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
General
- Target e1bb7705010f0d11f6ba8313a55f19e811c9263138c3a924026b23d2ee3afa5d.exe
- Size 980KB
- Sample260807-lynncsvyb1
- SHA256 e1bb7705010f0d11f6ba8313a55f19e811c9263138c3a924026b23d2ee3afa5d
- MD5 5d5935e135a1d43214a1820efa18c931
- SHA1 49149a722e926676b9daf7af07ee7087d4f23fde
- SHA512 bc0d242279d7599020f47b6afd4c155f835786796eeda484f8cf7d00d4f1fbbe3138edaf8acd9ce6e1208ff6333a413a7f571da5e1f77be01a48d7b31da181f8
- SSDEEP 24576:nmYYfEpOdcg+1RNNErW/lJm4INZK5PCV+rFKccUI:n/YAOdU1Rz8W/mJy5P5J1
- TLSH T10A2523453B50C293C826B77294DBE1F6D327DE794E458BA381A730ABA73161833521FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/3880-0-0x0000000000400000-0x0000000000818000-memory.dmp upx behavioral1/memory/3880-2-0x0000000000400000-0x0000000000818000-memory.dmp upx - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language e1bb7705010f0d11f6ba8313a55f19e811c9263138c3a924026b23d2ee3afa5d.exe