Analysis
- max time kernel
150s - max time network
115s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
16/08/2026, 01:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f71f30b14c401f191f57c5bce458cfb2c8a68cf24c6a99ee10336d5a12096ed1.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
f71f30b14c401f191f57c5bce458cfb2c8a68cf24c6a99ee10336d5a12096ed1.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target f71f30b14c401f191f57c5bce458cfb2c8a68cf24c6a99ee10336d5a12096ed1.exe
- Size 5.3MB
- Sample260816-btgddaxblh
- SHA256 f71f30b14c401f191f57c5bce458cfb2c8a68cf24c6a99ee10336d5a12096ed1
- MD5 3467b2b4b7b4995a32c1b00e8838b90b
- SHA1 14ff3e05b764cd5402a884529428b62a1297368f
- SHA512 f218ca43b80ae23f10451acc556cdb787eafa8fd5b25528a93fd2220708ec97ca538937a92c0647a39d5f7802a4fe74c3eaa1d89e134befdb95dccba03b21c76
- SSDEEP 98304:wSEQr7Zg4T5ldMYnPXkm0VkmXQ5rs8B6eJUuqs1jhaULtyl1hR:6Qr7Zg4ThyVlXQ5rs8QZuqs+J
- TLSH T1A9469D01B552C0B5E44212B0F92EFBFFD6287E229B2C89DBA3D03D5B79711D12A33656
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language f71f30b14c401f191f57c5bce458cfb2c8a68cf24c6a99ee10336d5a12096ed1.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\f71f30b14c401f191f57c5bce458cfb2c8a68cf24c6a99ee10336d5a12096ed1.exe"C:\Users\Admin\AppData\Local\Temp\f71f30b14c401f191f57c5bce458cfb2c8a68cf24c6a99ee10336d5a12096ed1.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4184
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:4652