Analysis
- user interaction
yes - max time kernel
6s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
07/08/2026, 15:03
Behavioral task
behavioral1
Sample
AUninstall.exe
Resource
win10v2004-20260513-en
2 signatures
900 seconds
General
- Target AUninstall.exe
- Size 682KB
- Sample260807-sfgknazzft
- SHA256 2404088cadc4022144074992974864df5f762d4d7abb56de0a99c68470b57143
- MD5 f40a6223c5a0dbb2fa9246450ea5dc7c
- SHA1 2cb65256c8fae4f7d39d113347c450020d3f43a9
- SHA512 80e41956cb2bb461d366b12d7a355de09464311105688810516dadc2217c95bb386631c15a18bd82d720e54af2440833a0dc6c3a88dc68072e1289932d680de4
- SSDEEP 12288:KrQ6FjiNFx5Qrb5jgfl5ghHvC+5UmZQJuIHIZlTAufywjQNqzeGXQT0i3TndT:Kz0NFbQpjSlmnEHiTLSqzqj37F
- TLSH T11AE42382B41CEDC1E129C777ED27C88D1F8270179A8B2EDABD8C90AD5579260C567C3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2200-0-0x0000000000400000-0x0000000000674000-memory.dmp upx behavioral2/memory/2200-2-0x0000000000400000-0x0000000000674000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language AUninstall.exe