Analysis
- max time kernel
150s - max time network
147s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/08/2026, 10:57
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
primordial.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
primordial.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target primordial.exe
- Size 19.3MB
- Sample260820-m2eejavfke
- SHA256 afbd8d67e63a514146f19819e3c5586f3fbc97d50ae2470aca19368c9d8032ff
- MD5 3b4f93cc03d5f1c6b2015039e5a9c9e2
- SHA1 c1ec3148c34f0617076bc5fc63f349a104c15cb6
- SHA512 b17196fc9f4b13d18621abb28bb693239f5bd01972f1efcfb4dbfabdf0aa69e7ad4ff956b1992ab380dda44c50ca6c0ac2385c49c3e329cfc2568a3c757c495f
- SSDEEP 196608:wE3nYdUzx3ECRTBDga8CK/O3f4GpCrMGXdaN8/dd1n5M8FjgrEDIrPzLh:9YiN3zjf4GpCrJHvMYUEDIjX
- TLSH T1EE17D0027616C4A6E74A0AF1A66D7FBA656C59B41B1F0CC3B3C41E65D8B01C22A73F1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language primordial.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe 4956 primordial.exe