Analysis
- max time kernel
148s - max time network
151s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
03/09/2026, 14:56
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2c59a145bcfe5032c0ab0583baad3943ed6a323ef009426a31e5d66af6820a86.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2c59a145bcfe5032c0ab0583baad3943ed6a323ef009426a31e5d66af6820a86.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target 2c59a145bcfe5032c0ab0583baad3943ed6a323ef009426a31e5d66af6820a86.exe
- Size 2.1MB
- Sample260903-sa8rysap91
- SHA256 2c59a145bcfe5032c0ab0583baad3943ed6a323ef009426a31e5d66af6820a86
- MD5 05d53c5d8756ec259b8e8357a3145e63
- SHA1 e75bbab9eb866a2640874750daea1bcc66101b76
- SHA512 e8bf238a8a8ba637439a3bcfc1fb34004d99ca4707e41215474c37f1b69a6fbf38271ab71b3ea6913d4589610efcd5f649b4f030c9fb2daf785d75440dcb6b1c
- SSDEEP 49152:pVQCYFc3lBG3qb6c61wwOKO5WqfodhWGA4HnCIdD+0/H7icQd:pVQjZa/BwhCWqfodUoHCIM0/bicQ
- TLSH T1BDA5E022B562D032D16111B22939FFB69A7DAA740F7564CFA3D01F3E69206C22E35F17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Malware Config
Signatures
- Downloads MZ/PE file 1 IoCs
flow pid Process 1 3872 2c59a145bcfe5032c0ab0583baad3943ed6a323ef009426a31e5d66af6820a86.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2c59a145bcfe5032c0ab0583baad3943ed6a323ef009426a31e5d66af6820a86.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2c59a145bcfe5032c0ab0583baad3943ed6a323ef009426a31e5d66af6820a86.exe"C:\Users\Admin\AppData\Local\Temp\2c59a145bcfe5032c0ab0583baad3943ed6a323ef009426a31e5d66af6820a86.exe"1⤵
- Downloads MZ/PE file
- System Location Discovery: System Language Discovery
PID:3872
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\launcher_error.log
- Size 1KB
- SHA256 7ee806a1d20461f2062e97b2a784c85cbfebb96cdb9aa97adb674400d6fe2741
- MD5 05bb845842c366dcac3b5ac1cb5ab438
- SHA1 3a98333e719e655993eed9b771828ade48bf8ee2
- SHA512 e7cdd137d032e31bee9b5043e4de8b3943c2061331973ee2ac7effc5bbf9910d2f9eebe939ace29656255f3a794bf5407e23a032b468f9193d3c30d1de3b41f2
- TLSH T1BA210705332DA0EA0A504566F6131FDA91907F63AB08FB1C37A52201795BD3F6AFB191
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\launcher_error.log
- Size 1KB
- SHA256 e61d26bfcd8ec15753d93a6743cb1a3afdd25f374c698541663ebfc630b1fe74
- MD5 5c981ae3f154e8b1b92d62f94b7a623d
- SHA1 a3dc75b88bfc7e4e72d8c98aa272c22372781de6
- SHA512 9cbd944d0665f772fc4afc7ff35f71bed6a157f35c4da8f0ed31b84d09420fe70057fbb021c8ae3cfdd30c31d81c23d63ef29f8c58ae0654c466b3216b1c8355
- TLSH T122414109372DE0EB46404456F2631FE6C1917F936B0CEB1C26A12205B95783FAFFB196
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\launcher_error.log
- Size 2KB
- SHA256 6f920b6b1f5e9be84f23a33c8e5e893e9f56d12ff5530235c6657ed5c744daaa
- MD5 5c11a2ca2cb92149816b0efe84934a67
- SHA1 89a00e10f735c0e2678bdabeff25eb478df9483f
- SHA512 8df633ef567fa72d8ab75bc1faeb4a477b9957c7400fd96ba8c2b80633d1f32bf5269d31f6393c262d1eb8244fa1a0a1717ca9cf4c8fcb6eb577c3e19d499729
- TLSH T14B513D09772DE0EA07404456F1772FEA80517FE36B08EF1C2BA12104B65793FAAFB196
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\launcher_error.log
- Size 695B
- SHA256 25002c120e3c2a44ab531ddc234a879a9cb17e3c349084bd2eb493c4a24ef392
- MD5 333b3304f3f6c2ceab8e38b27b2c9963
- SHA1 73313f48fb953a3fa55fe6a78faa97e47bee9193
- SHA512 e7be73d8a836cdeaf23156042069147284c0afef2812352296e5fadf2d8af9ebf723565930ada4b1827d80ba63c43378a18b25717aa2ee815ba4b3b47775ea32
- TLSH T12101FC08336964EB47604862F6532F9AC4917FA7AB48EB1C2BA02506745783F5FF7251
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\launcher_error.log
- Size 4KB
- SHA256 a2a9bb988fbe6a7614664937b87c3d70584cc8a10b72639ceb49b5311a442b30
- MD5 34c536ecd251eba445eba5c2f339c206
- SHA1 4fe021cb6f2b0b6d9b9e68a5f5347f0f25893d88
- SHA512 a4ea8b420ddd3ad4daf435389f42829c9a32a0759cfc08b223a62aeaed8d1b704e5785f4c706499994cb1913c4530bdb1aa63d25bdbc2405cd98843324a16335
- SSDEEP 96:O9HfBSMpOOGZkJbqn0ApFkr4V3BRkgBX/nK0yT:GL9Jqn5X/nKHT
- TLSH T149A16D19772DE0EE06404451F1372FDE81853FA36B08EF1C67A12504A56793FAAFB197
- MD5 SHA1 SHA512 SSDEEP TLSH