Analysis
- max time kernel
599s - max time network
585s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/08/2026, 18:19
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Plants vs Zombies Ultimate Edition/PvZ Ultimate Edition.exe
Resource
win10v2004-20260513-en
1 signatures
600 seconds
Behavioral task
behavioral2
Sample
Plants vs Zombies Ultimate Edition/PvZ Ultimate Edition.exe
Resource
win11ltsc2024-20260709-en
1 signatures
600 seconds
Behavioral task
behavioral3
Sample
Plants vs Zombies Ultimate Edition/bass.dll
Resource
win10v2004-20260513-en
2 signatures
600 seconds
Behavioral task
behavioral4
Sample
Plants vs Zombies Ultimate Edition/bass.dll
Resource
win11ltsc2024-20260709-en
2 signatures
600 seconds
General
- Target Plants vs Zombies Ultimate Edition/PvZ Ultimate Edition.exe
- Size 2.8MB
- Sample260820-wyf9dsfb89
- SHA256 6dabd3d0d9aaa0b86d52f1be08c4063ba78b63e42f86ba82e1d998417dff9ff7
- MD5 f785879ab9f71df9489033b91835fe08
- SHA1 49150c276a85d3aa40cc463e6c432931ff05df66
- SHA512 2dee959e67878468affc7186b02db9af68fc43987a31aa0a1dcbd119dfd0e29db6736b095c6fa70ce8711a9d477361e6fa5a69bb18ddc81483f940130c42babf
- SSDEEP 49152:pC1FfqOsx3R+ijGgz4M/SZz3yUmaeeDRgh2xOfQDyYJNo/OnAMhghx96S7k0k:8Cf6ijFUrHeeD2h8YbMhok
- TLSH T15CD58C52F3DB90E2D81B1A7541B5A72B84315F541338A6D3EB943F2FA9303E2E83B159
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language PvZ Ultimate Edition.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Plants vs Zombies Ultimate Edition\PvZ Ultimate Edition.exe"C:\Users\Admin\AppData\Local\Temp\Plants vs Zombies Ultimate Edition\PvZ Ultimate Edition.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4916
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:5888