Overview
overview
3Static
static
3b1184c75da...77.exe
windows10-2004-x64
3b1184c75da...77.exe
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3$_20_/NDP4...NU.exe
windows10-2004-x64
3$_20_/NDP4...NU.exe
windows11-ltsc_2024-x64
3Analysis
- max time kernel
149s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
24/08/2026, 00:13
Static task
static1
Behavioral task
behavioral1
Sample
b1184c75daf2a52b78cc946bfb3c3d37ac78646811a6ab2b25d83082f888ef77.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
b1184c75daf2a52b78cc946bfb3c3d37ac78646811a6ab2b25d83082f888ef77.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral7
Sample
$_20_/NDP471-KB4033342-x86-x64-AllOS-ENU.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$_20_/NDP471-KB4033342-x86-x64-AllOS-ENU.exe
Resource
win11ltsc2024-20260709-en
General
- Target $_20_/NDP471-KB4033342-x86-x64-AllOS-ENU.exe
- Size 4.5MB
- Sample260824-ah2dqs1fqa
- SHA256 57a49a230de236c79c6cc0aa3fb9c571e823955bdf4dd1f4d89d0db97e206ebd
- MD5 a95a82d0344271f0ce7981195a283c54
- SHA1 4af5c569438c02050e664cd1ccf1cf0f8c72e542
- SHA512 da322fc0da70c91bb0982d532d05254693cead126af4c1f0001815842a1658af3471ae690b493533f14222a0f748b606f02330b10849eedb7ec8acf50a507d2b
- SSDEEP 98304:7L3s0F7Q5o4YRv7xCfrouYfyV36jZ7nctkL2GMaT1f7uMKeHksxw5k+2lk6zSvLQ:P80iTeCfYfI3617lhhfaoQQ
- TLSH T1702633132270E073E1F72671DA79DAF595683B50427CE41FBB906F3D2E70250A8BA35A
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language NDP471-KB4033342-x86-x64-AllOS-ENU.exe