Analysis
- geolocation tags
cacanadananorth-americatoronto - user interaction
yes - max time kernel
1199s - max time network
1038s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
08/08/2026, 03:10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
PcRaper32.exe
Resource
win10v2004-20260513-en
1 signatures
300 seconds
Behavioral task
behavioral2
Sample
PcRaper32.exe
Resource
win11ltsc2024-20260709-en
1 signatures
300 seconds
General
- Target PcRaper32.exe
- Size 35KB
- Sample260808-dn4b3ayfrb
- SHA256 75e06ac5b7c1adb01ab994633466685e3dcef31d635eba1734fe16c7893ffe12
- MD5 8fd3551654f0f5281ddbd7e32cb73054
- SHA1 9b1c9722847cd57cd11e4de80cd9e8197c3c34cd
- SHA512 a716f535e363fc1225b1665e1c24693e768d13699ea37bdf57effe4fea24b4b30a2181174f66c35e749b9c845b07f82eecbf282ee5972de0426f847293d46b4b
- SSDEEP 768:sAzGzd0LnFjuwY6QlVwvHI1pSgNEl/MYoeAW:5zGzd0wXlVwv0SgNQXoeAW
- TLSH T16BF28C0BF6919123C4634A3046786B21E7BF9449293E824FDE80FB9C2D797CBDB58716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language PcRaper32.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\PcRaper32.exe"C:\Users\Admin\AppData\Local\Temp\PcRaper32.exe"1⤵
- System Location Discovery: System Language Discovery
PID:3820
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:6004
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:4796