Analysis
- max time kernel
150s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
26/08/2026, 12:17
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
6 signatures
150 seconds
General
- Target 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe
- Size 11.1MB
- Sample260826-pf3lcayeka
- SHA256 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4
- MD5 ad8f9ebc9af292d5b3b4dff6556bfd0a
- SHA1 14417799e30eee5351faba21cc15bf3e8a9ed4a3
- SHA512 e563259dc095cd7d13ee6f150d8bfc2af667477858473c2998470d03dd159a4b348c28808ec10085dfadc69761180c2c0ee7cfaad264d74d7eb2faaeecb29d8e
- SSDEEP 196608:iEuAd5dyPrvskycKjNck82/7bDn4N/QYblulyqKQ:oi4PrvsBcH+z4NDxGKQ
- TLSH T196C6D011F2A50421E42111B3C2CEEB372653DE458566AED6BBA0FDDBF6387421F318E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
pid Process 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe - Suspicious use of SendNotifyMessage 1 IoCs
pid Process 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe 3148 40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe"C:\Users\Admin\AppData\Local\Temp\40d7c36c33662f280df8de6933909e9a0a92b629d9216a9fdb00a95a5f0f1dc4.exe"1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:3148
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\E2EECore.2.8.11.dll
- Size 10.1MB
- SHA256 177318905f25ef02e1cdaeeedb6928dfbd764c68e9377acf822266673612c35a
- MD5 cf1cf69eb4d66aca7c3f3c914d96b654
- SHA1 5c7eb1ef6b12850700429b023b82d971526ee6ee
- SHA512 afb74a4664f5982ff95392e56d10d554f40ffcc390bf387f3ac11c37ca0fe1bfc074018b0114875c65afa3c37407f5ca09c556191ea367c674f5fc4f5e524263
- SSDEEP 196608:L+MDZ3sE4eMhNbz+ewVC7EOACGKT6ChS4xmrlm2HkVvWFys9VsxiM9K3U:L+M2JNH+ewVIT6Czmrlm2vCiEj
- TLSH T17BB69D00FB428172E9CE01B5517AAB3E85387E24073959D7F3587E2A6F316D23B3664E
- MD5 SHA1 SHA512 SSDEEP TLSH