Analysis
- max time kernel
150s - max time network
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
14/08/2026, 14:07
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6b75ce77f9d5900e21c91131bc1bda737eff93f0b089107bde6e0f0c676e18c7.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
6b75ce77f9d5900e21c91131bc1bda737eff93f0b089107bde6e0f0c676e18c7.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 6b75ce77f9d5900e21c91131bc1bda737eff93f0b089107bde6e0f0c676e18c7.exe
- Size 7.8MB
- Sample260814-re9dlsvgrf
- SHA256 6b75ce77f9d5900e21c91131bc1bda737eff93f0b089107bde6e0f0c676e18c7
- MD5 b8c778fd81216c962b759c65f36b2d88
- SHA1 bfd04540602f6305f9a31fb61e697dee33d4f58b
- SHA512 1da84a2282849602c779591ce60e62c02067977797e855a7fba5a5b89a5cf803d142546880d6924071d0795b5d303998440dc21c37b9d8e8fed1c6541a766583
- SSDEEP 49152:RsMk3+HWuHAsY7rsVI6ZNCm0DJc3IL9pyHsLQIJm3uJ6vyJ1R03qYCjTgBHdqndG:WaJAWEToLsPlvIUkeF+
- TLSH T19E863B20AB019019FDE302779FFD58ED446CBD604BD850D3B2885BFE966B7E16A32247
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PhysicalDrive0 6b75ce77f9d5900e21c91131bc1bda737eff93f0b089107bde6e0f0c676e18c7.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 6b75ce77f9d5900e21c91131bc1bda737eff93f0b089107bde6e0f0c676e18c7.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\6b75ce77f9d5900e21c91131bc1bda737eff93f0b089107bde6e0f0c676e18c7.exe"C:\Users\Admin\AppData\Local\Temp\6b75ce77f9d5900e21c91131bc1bda737eff93f0b089107bde6e0f0c676e18c7.exe"1⤵
- Writes to the Master Boot Record (MBR)
- System Location Discovery: System Language Discovery
PID:3080