Analysis
- user interaction
yes - max time kernel
150s - max time network
144s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
06/09/2026, 23:18
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Shadow.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Shadow.zip
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Shadow/Shadow.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
Shadow/Shadow.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target Shadow/Shadow.exe
- Size 722KB
- Sample260906-3af22shr2x
- SHA256 3cd64f4d6f2e5d0b45f06477e4a010cef164e45f6e0952aec8c1e0338874107f
- MD5 1964102f0033578367168655d69d97f4
- SHA1 31757cb81382291687519b897dd340ff2af319f2
- SHA512 989d9b0b11a65493b5f0d4965067c85d2cfddf7ee6a7a702ffee0dcf66f002c4533f9bc776aa76b3b969de623574fbb2ef3a7c042547ea06395afdccb709862e
- SSDEEP 12288:UekWRx1GJsCWazbRo5z5qs73TCHJZRl/pu2aCAeHTnhkIDfeDWB5MQ3isw/bD9wa:vz5qs732Bhnfei5MQSzbD9MOOrrjwf
- TLSH T1AFF41280F3C1D0B2D4F7043A05F8ABB68D2DA47517316CEB634857A9DA743C1AA3AB57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Shadow.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe 5816 Shadow.exe