Analysis
- user interaction
yes - max time kernel
6s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
05/09/2026, 02:40
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Nueva carpeta/OemDrv.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Nueva carpeta/OemDrv.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target Nueva carpeta/OemDrv.exe
- Size 2.3MB
- Sample260905-c55e1sstct
- SHA256 ee1ec1a0acfcc3b790f5ce94a8789d29699c8ed08002be030f36e3e49da071ab
- MD5 616448166449b595f321c9acb8dac357
- SHA1 0826149d72240939410203c24745b7354dd4ca32
- SHA512 1e9cb889150d5be130050987619136adb06621d5a76ed00f5601d01468629c382011997ad5b78c5de3a0e65e3e3e134fcb556dbedd7e302226b15ed13c6feb4c
- SSDEEP 49152:pHOL8xiyi3YkZG5ft6VPeoREzjFGETZdXZgNwQW7ZtnD2Wzl:pY8AbIH5ft+ezjFGEV9Ziwn7ZtD2
- TLSH T1FEB58D117BC38275D6733A31855E6339E5AAA9B01B394AC762902F393E305C3AD3D71B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language OemDrv.exe - Suspicious use of FindShellTrayWindow 4 IoCs
pid Process 5460 OemDrv.exe 5460 OemDrv.exe 5460 OemDrv.exe 5460 OemDrv.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 5460 OemDrv.exe 5460 OemDrv.exe