Resubmissions
20/08/2026, 14:03
260820-rcs9lsdm2x820/08/2026, 10:24
260820-mfjgcsam3v820/08/2026, 10:07
260820-l5zn7sxwgv8Analysis
- user interaction
yes - max time kernel
4s - max time network
13s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
20/08/2026, 14:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0x/Sjtweaks cracked by tank230/39xu9wRFs2w8oOrnfWcb5qKr6Fd/SJTweaks Premium.exe
Resource
win10ltsc2021-20260513-en
13 signatures
600 seconds
Behavioral task
behavioral2
Sample
0x/Sjtweaks cracked by tank230/39xu9wRFs2w8oOrnfWcb5qKr6Fd/resources/elevate.exe
Resource
win10ltsc2021-20260513-en
1 signatures
600 seconds
General
- Target 0x/Sjtweaks cracked by tank230/39xu9wRFs2w8oOrnfWcb5qKr6Fd/resources/elevate.exe
- Size 105KB
- Sample260820-rcs9lsdm2x
- SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
- MD5 792b92c8ad13c46f27c7ced0810694df
- SHA1 d8d449b92de20a57df722df46435ba4553ecc802
- SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
- SSDEEP 3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
- TLSH T1EBB37C1274C0C471E5732A361974CAB14AADFD700E759FAF6398127A4FA01D09A3AFB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language elevate.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\0x\Sjtweaks cracked by tank230\39xu9wRFs2w8oOrnfWcb5qKr6Fd\resources\elevate.exe"C:\Users\Admin\AppData\Local\Temp\0x\Sjtweaks cracked by tank230\39xu9wRFs2w8oOrnfWcb5qKr6Fd\resources\elevate.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4936