Analysis
- max time kernel
148s - max time network
152s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/08/2026, 16:53
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8ce4430b33842dfae7407a2640cd8389915e91ef53bd3aa441bffd1309925ae7.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
8ce4430b33842dfae7407a2640cd8389915e91ef53bd3aa441bffd1309925ae7.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 8ce4430b33842dfae7407a2640cd8389915e91ef53bd3aa441bffd1309925ae7.exe
- Size 68KB
- Sample260820-vd492sfp21
- SHA256 8ce4430b33842dfae7407a2640cd8389915e91ef53bd3aa441bffd1309925ae7
- MD5 f8d57b90de21d2d9daf7b4012e318865
- SHA1 307c8b31871a72764bcaf72dc6885eb2cd3ec539
- SHA512 a8f2f1aed394abc1f28a49cc8749449491c14e061854042106dbcbc9ad0f0751ad6e92e8aca36a73bc08991112dd4454726aa0f5af3fbf218db17a3ec8e1007f
- SSDEEP 1536:GlnvjL+8yTacGXCJvfA9AnV6cfaw1QVdzdRdWkmE8edOOo:GlnvjL+PTacv5hmdzdRdWkmE8edG
- TLSH T1F7634C0387FAC4A9F4B36539293C62D66937FE391835D0AC455900798E3E786AE24F33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 8ce4430b33842dfae7407a2640cd8389915e91ef53bd3aa441bffd1309925ae7.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4148 8ce4430b33842dfae7407a2640cd8389915e91ef53bd3aa441bffd1309925ae7.exe 4148 8ce4430b33842dfae7407a2640cd8389915e91ef53bd3aa441bffd1309925ae7.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\8ce4430b33842dfae7407a2640cd8389915e91ef53bd3aa441bffd1309925ae7.exe"C:\Users\Admin\AppData\Local\Temp\8ce4430b33842dfae7407a2640cd8389915e91ef53bd3aa441bffd1309925ae7.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:4148