Overview
overview
7Static
static
3Zentimo.xS...04.exe
windows10-2004-x64
7Zentimo.xS...04.exe
windows11-ltsc_2024-x64
7$PLUGINSDIR/Aero.dll
windows10-2004-x64
3$PLUGINSDIR/Aero.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...RL.dll
windows10-2004-x64
3$PLUGINSDI...RL.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ps.dll
windows10-2004-x64
3$PLUGINSDI...ps.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3Languages/...ed.vbs
windows10-2004-x64
5Languages/...ed.vbs
windows11-ltsc_2024-x64
5Languages/...al.vbs
windows10-2004-x64
5Languages/...al.vbs
windows11-ltsc_2024-x64
5Languages/...se.vbs
windows10-2004-x64
5Languages/...se.vbs
windows11-ltsc_2024-x64
5Languages/Polish.bat
windows10-2004-x64
3Languages/Polish.bat
windows11-ltsc_2024-x64
3USRFindHandle.dll
windows10-2004-x64
1USRFindHandle.dll
windows11-ltsc_2024-x64
1Zentimo.exe
windows10-2004-x64
6Zentimo.exe
windows11-ltsc_2024-x64
6ZentimoService.exe
windows10-2004-x64
1ZentimoService.exe
windows11-ltsc_2024-x64
1usr.exe
windows10-2004-x64
3usr.exe
windows11-ltsc_2024-x64
3Analysis
- max time kernel
30s - max time network
32s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
13/08/2026, 22:56
Behavioral task
behavioral1
Sample
Zentimo.xStorage.Manager-3.4.1.1304.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Zentimo.xStorage.Manager-3.4.1.1304.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/Aero.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/Aero.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/BrandingURL.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/BrandingURL.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/ToolTips.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/ToolTips.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
Languages/Chinese-Simplified.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
Languages/Chinese-Simplified.vbs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
Languages/Chinese-Traditional.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
Languages/Chinese-Traditional.vbs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
Languages/Japanese.vbs
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
Languages/Japanese.vbs
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral21
Sample
Languages/Polish.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
Languages/Polish.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
USRFindHandle.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
USRFindHandle.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral25
Sample
Zentimo.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
Zentimo.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
ZentimoService.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
ZentimoService.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
usr.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
usr.exe
Resource
win11ltsc2024-20260709-en
General
- Target usr.exe
- Size 1.9MB
- Sample260813-2wtplahk21
- SHA256 d640f3f4c7c1071f6c6624b5cadf72010bcbdd2afba790dd11afc3e5513ddcc0
- MD5 83c5d1e08b6274d4637cdb4d083ed40f
- SHA1 d4f2b133f110875345b74c2b4b700f9b17344d3d
- SHA512 fc3b267dced36dd9ad5253332e8f01a118b2a4aaf68c45ee2e2564faf278f866db51c92b7e818a9f4fa2907bd173e421e9c21cbd60240d483cf972495ca1e1f9
- SSDEEP 24576:k9BaOBG99PULjtEJwoMN6GEh7XSS6/eVLYc6G4Jkj7BoSqA8vcECHr8y/U7NU4yy:aaK0wEGE8u8Xkj7CSn8er/UZ3au
- TLSH T1E3953B13B798503BD0BB1B3B5C779350683F7A602AA5980B2EE50D4D4F3AA41BD3A717
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language usr.exe