Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
31/08/2026, 06:54
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe
- Size 7.9MB
- Sample260831-hpp82sem7s
- SHA256 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f
- MD5 1dab9a77bd23fafa01b60b30e10de0f4
- SHA1 194e78c1b1ce8738296d6f51cf320b3f990b1bd3
- SHA512 1eb3df19f275c459717d2bea97b4917e2f1193c10fe65d49e0d31ee61f5624bdda5487258c5b923a521c35bb044febeef1657b496cd95130277f041ebe434dad
- SSDEEP 98304:Y/5QiqyT3q9PzYme3oCX73i4PKIfCCFbyRJiUJ:YBrILq79VCCFbyfiU
- TLSH T1D786212C47F2082BFBC3C33D01DD88F231DD361597A67542FEE255B9499626983B2B29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe 1128 32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe"C:\Users\Admin\AppData\Local\Temp\32d679d3f43212da2a883b9384001f9781bf9fefdad2d67d787ef23d314f854f.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1128