Analysis
- max time kernel
148s - max time network
143s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
22/08/2026, 14:04
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
012343959708907b73ba18e7b46cab22bbb375f1b5cebc1dc07c7265e485cd22.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
General
- Target 012343959708907b73ba18e7b46cab22bbb375f1b5cebc1dc07c7265e485cd22.exe
- Size 722KB
- Sample260822-rddwbaverf
- SHA256 012343959708907b73ba18e7b46cab22bbb375f1b5cebc1dc07c7265e485cd22
- MD5 345253f3df2444da8a2db50ffd937cd4
- SHA1 a227e68d9caa2e4ed48fe244cd337a7d78848893
- SHA512 cd5f60ec4415fd6779c8f5592619291f4bf97ed900cb948267a72fd84d834702a0cbc8295a4b34c3f0d5a1f02250ee8bc8475a37c26becb9c128f26dcfb38871
- SSDEEP 12288:05gIX501XowJ/m1bQOiRiyVSrz5bQlTsCM88Bmcy4Mq3GFIit51LY5vpriejv48/:05gIX5AXowJ/m1bQOiRiyVSrz5bQ1sCE
- TLSH T179F43B237211C0A7D0242BF95696162C3CB847283DB99963EFD8AE677DF4632DB3640D
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
pid Process 2440 012343959708907b73ba18e7b46cab22bbb375f1b5cebc1dc07c7265e485cd22.exe -
resource yara_rule behavioral2/memory/2440-1-0x0000000000C00000-0x0000000000C0B000-memory.dmp upx behavioral2/memory/2440-3-0x0000000000C00000-0x0000000000C0B000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 012343959708907b73ba18e7b46cab22bbb375f1b5cebc1dc07c7265e485cd22.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\ProgramData\E-Module\gzip.dll
- Size 29KB
- SHA256 97ea3d99cf21123bc1aec72f9ded6a51ac659830392adfefd424eb799ab0219e
- MD5 8b3591965f623b219c0c528153746cab
- SHA1 020961494fa0e08779b7aacf4422269935354f7d
- SHA512 6e547197d160c9ec13cf2384add1bb6753276e3dab97d951adba9257d6bf999720635a7b9d94a5ca8b94bdda2f25f36c5938d126bc3e46a358e1fad072132351
- SSDEEP 768:T5aM3xJoa/eBmLnw7w4/Y5C81G1ky6lHA6St:d5Joa/eIH4/Y55JvHAh
- TLSH T188D27EE2F581417BD5991B32EE999C0913E47683F632688531E43ECE3ED9E404A763C7
- MD5 SHA1 SHA512 SSDEEP TLSH