Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
05/09/2026, 01:50
Behavioral task
behavioral1
Sample
eea5af0bf5a008b2f5d39a4e9c9ec5f1ecea38c8ecdc0b618cc9e4bd2abc8c66.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
eea5af0bf5a008b2f5d39a4e9c9ec5f1ecea38c8ecdc0b618cc9e4bd2abc8c66.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
General
- Target eea5af0bf5a008b2f5d39a4e9c9ec5f1ecea38c8ecdc0b618cc9e4bd2abc8c66.exe
- Size 1005KB
- Sample260905-b9qa8a1ycs
- SHA256 eea5af0bf5a008b2f5d39a4e9c9ec5f1ecea38c8ecdc0b618cc9e4bd2abc8c66
- MD5 c1fee6f3bd50179dd5abb543afc11efd
- SHA1 ee88fbbdccedaa1e534f440b1fd8760c68907869
- SHA512 4e7c06ec50d8029856218ca70c6666167c123223eea60cc1f36a9a49df93df874a7b3776406be9be56171ccf41f1ba23c3cef29caac293e2828a784dc0261692
- SSDEEP 24576:6FgnopG4uTnXsBLdiFoZxiZZmMh1SXQRH4Fdl9ivRua2m:logxTnXsXiFKEZZmMDPRH4FXgsbm
- TLSH T11825238C4FCE87D6FF4B43757D812B3524396FA28074897A7CCB9A1962352F22605EC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language eea5af0bf5a008b2f5d39a4e9c9ec5f1ecea38c8ecdc0b618cc9e4bd2abc8c66.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4800 eea5af0bf5a008b2f5d39a4e9c9ec5f1ecea38c8ecdc0b618cc9e4bd2abc8c66.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\eea5af0bf5a008b2f5d39a4e9c9ec5f1ecea38c8ecdc0b618cc9e4bd2abc8c66.exe"C:\Users\Admin\AppData\Local\Temp\eea5af0bf5a008b2f5d39a4e9c9ec5f1ecea38c8ecdc0b618cc9e4bd2abc8c66.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4800