Analysis
- user interaction
yes - max time kernel
149s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
03/09/2026, 16:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AntiDeepFreeze0.4.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
AntiDeepFreeze0.4.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
5 signatures
150 seconds
General
- Target AntiDeepFreeze0.4.exe
- Size 651KB
- Sample260903-thfa2sbp2v
- SHA256 7406a667648c6f7ac52a2c4f806945ec48e4992b77a5c0b74f4eff0feee1ee95
- MD5 fcd316dff2bb47ca738d11fb4ce654c4
- SHA1 85046777adb4fae2080796f4bdf665ab4b5bc885
- SHA512 9687d1a3d0a3bde5e60d3c1a5f9dcaba62bb4dc68dbd11ac769588ea2ab508849d72442881ddae77d9748069a673117f93e65698b9f26916b9dbeea32d703196
- SSDEEP 12288:2beoCDyJ+1GneUMGdJFDWupAfEesc1dNkOwOkv:EVbJ+1cciAfBdNyO
- TLSH T149E48D62F1A14837C1621A398C2B97A8A839BE303D38998F3BE57D4C5F357D0356B197
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language AntiDeepFreeze0.4.exe - Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe 1376 AntiDeepFreeze0.4.exe