Resubmissions
26/08/2026, 03:42
260826-d9nhqssape526/08/2026, 03:38
260826-d627qagl2s626/08/2026, 03:34
260826-d41k4ssamf6Analysis
- max time kernel
149s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
26/08/2026, 03:34
General
- Target cr-keygen.exe
- Size 410KB
- Sample260826-d41k4ssamf
- SHA256 4defe61c88715bc8ec5127dab6d78fddb1d01df52f9332c7914e36a15d2ad5fb
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\cr-keygen.exe"C:\Users\Admin\AppData\Local\Temp\cr-keygen.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4956-0-0x0000000074722000-0x0000000074723000-memory.dmp
memory/4956-1-0x0000000000D60000-0x0000000000E14000-memory.dmp
memory/4956-2-0x0000000074710000-0x0000000074ECC000-memory.dmp
memory/4956-3-0x0000000074710000-0x0000000074ECC000-memory.dmp
memory/4956-5-0x0000000074710000-0x0000000074ECC000-memory.dmp
memory/4956-4-0x0000000005970000-0x00000000059A0000-memory.dmp
memory/4956-6-0x0000000074710000-0x0000000074ECC000-memory.dmp
memory/4956-7-0x0000000009330000-0x00000000098EA000-memory.dmp
memory/4956-8-0x0000000005CD0000-0x0000000005D62000-memory.dmp
memory/4956-9-0x0000000005CA0000-0x0000000005CC2000-memory.dmp
memory/4956-10-0x0000000005DA0000-0x0000000005DAA000-memory.dmp
memory/4956-11-0x0000000074710000-0x0000000074ECC000-memory.dmp
memory/4956-12-0x0000000074722000-0x0000000074723000-memory.dmp
memory/4956-13-0x0000000074710000-0x0000000074ECC000-memory.dmp
memory/4956-14-0x0000000074710000-0x0000000074ECC000-memory.dmp