Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
14/08/2026, 00:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
dd7d2cb9a6a95cdd606274c9a1e16751ed12ed74f5f031286a529c7a6e05d529.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
dd7d2cb9a6a95cdd606274c9a1e16751ed12ed74f5f031286a529c7a6e05d529.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target dd7d2cb9a6a95cdd606274c9a1e16751ed12ed74f5f031286a529c7a6e05d529.exe
- Size 52KB
- Sample260814-andjvsec76
- SHA256 dd7d2cb9a6a95cdd606274c9a1e16751ed12ed74f5f031286a529c7a6e05d529
- MD5 e2751f8e31b5d94ccfc906f8ca51bcbb
- SHA1 ea87ea57cce93d0963c1a1a0c098141beea958ea
- SHA512 418ba0fa8135174835c796a77930fbf4f09be171a22a9953a930f28b904caf0cdc4ee333b8b5792161a783a711a3c3e55c43ea1c44764ef18cd963f4f59ec8ce
- SSDEEP 768:E9hQpYlBd3iRmzCAxrMZSKQeR/9XArzXjfOLdiladRdAhkmE8edI:4hQOgF9AnrOLdzdRdWkmE8edI
- TLSH T10033D91117F65889F9F38936282DAA4A1AB3FE164B34C0CF2661107A4F36FC0E575776
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language dd7d2cb9a6a95cdd606274c9a1e16751ed12ed74f5f031286a529c7a6e05d529.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3260 dd7d2cb9a6a95cdd606274c9a1e16751ed12ed74f5f031286a529c7a6e05d529.exe 3260 dd7d2cb9a6a95cdd606274c9a1e16751ed12ed74f5f031286a529c7a6e05d529.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\dd7d2cb9a6a95cdd606274c9a1e16751ed12ed74f5f031286a529c7a6e05d529.exe"C:\Users\Admin\AppData\Local\Temp\dd7d2cb9a6a95cdd606274c9a1e16751ed12ed74f5f031286a529c7a6e05d529.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:3260