Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
09/08/2026, 17:33
Behavioral task
behavioral1
Sample
53500d036d4c789301fe793b5c01a392e6bcabd6448af7d1364e419eb3a91201.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
General
- Target 53500d036d4c789301fe793b5c01a392e6bcabd6448af7d1364e419eb3a91201.exe
- Size 26KB
- Sample260809-v45cqsbf47
- SHA256 53500d036d4c789301fe793b5c01a392e6bcabd6448af7d1364e419eb3a91201
- MD5 4ed680e61600ebe73415a12189275c3b
- SHA1 09cd1f06e7f51e0bdcdd76c37ecd5e75ae0d54bc
- SHA512 1cbb6db6b9a516b8ab13f283f0d54e8008e7998b44a24fc84a40af5c50d55e73a4685f4a89ec58ac07b1259fd0d5f6c976e2d640f2d9d78ba114dff6d68678f0
- SSDEEP 384:QN3SaTSXW9bVWw7HtZARPn9jxH9qbuUsabQxnCJfJBndnjJuRVKr:QN3SaT5Lt+tIbyBiBneAr
- TLSH T10AC22B0833E4C572E2FD4ABA8C33D6108B75E55B9A23D75A6FC490AD292378D8A14FD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 53500d036d4c789301fe793b5c01a392e6bcabd6448af7d1364e419eb3a91201.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3996 53500d036d4c789301fe793b5c01a392e6bcabd6448af7d1364e419eb3a91201.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\53500d036d4c789301fe793b5c01a392e6bcabd6448af7d1364e419eb3a91201.exe"C:\Users\Admin\AppData\Local\Temp\53500d036d4c789301fe793b5c01a392e6bcabd6448af7d1364e419eb3a91201.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
PID:3996