Analysis
- user interaction
yes - max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
31/08/2026, 02:11
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ThirdExploit.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
ThirdExploit.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target ThirdExploit.exe
- Size 12KB
- Sample260831-cmnpjsed44
- SHA256 0a8c31406cc5115e931a4213774c2b991666ddc1e5ae00741d79d2147974e1a7
- MD5 8814085d8bfb52705e538acf4ba332d4
- SHA1 bddfba32f9b06f93a912b25a6daff444cd91f00c
- SHA512 2a1c73a935d7b2258dc2ff5e14684b43a0533bbed17e8ea108e3ce31f3ee5c1bf3d34dfb2c009cab7842abd7be4aac20a3817567eed492acb919d3293fcb8667
- SSDEEP 192:3Cf+XxndPBwpjkTm6ssJpz6ZTd71wlH0cC:SM3PBzTlzY4ln
- TLSH T17F42A416A7FE8E11F5BA97701DB25200C633B9F19C39DB5E469C61190F2BB8069A0763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language ThirdExploit.exe