Analysis
- max time kernel
148s - max time network
134s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/08/2026, 09:56
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5adb3f493602022a5e690425e8a1b5e2b5243d1456753564e9f488629263ba08.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
5adb3f493602022a5e690425e8a1b5e2b5243d1456753564e9f488629263ba08.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 5adb3f493602022a5e690425e8a1b5e2b5243d1456753564e9f488629263ba08.exe
- Size 3.0MB
- Sample260810-lyv3faer9x
- SHA256 5adb3f493602022a5e690425e8a1b5e2b5243d1456753564e9f488629263ba08
- MD5 d511ed1f20dcd58795daae835bdd00d4
- SHA1 b8ee4bdcd503dbb5d15eb6215bf65b9a399528b9
- SHA512 38065359030078fcf2fcae9358aaef74cda73c316cf5dbb7be79f87e870f60ea1bcba4ac8cc3568f325c10af319c56ddeba0d463cb19ed2dcef7c6ba47e1a98b
- SSDEEP 49152:WIT1ifknWRfjcemFZ7CAj365alnQCw4zfUW46NlIL2qTPF9uaznKE4kyDmO/Eh9:WEXKrcrZ7xjq5alnjzfUWpIauXznKEc0
- TLSH T1F7E53342B6C1A0B2C862183309265F71E97D6C717F516ADF53D06AED9D2B1C027317BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 5adb3f493602022a5e690425e8a1b5e2b5243d1456753564e9f488629263ba08.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2948 5adb3f493602022a5e690425e8a1b5e2b5243d1456753564e9f488629263ba08.exe 2948 5adb3f493602022a5e690425e8a1b5e2b5243d1456753564e9f488629263ba08.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\5adb3f493602022a5e690425e8a1b5e2b5243d1456753564e9f488629263ba08.exe"C:\Users\Admin\AppData\Local\Temp\5adb3f493602022a5e690425e8a1b5e2b5243d1456753564e9f488629263ba08.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2948