Analysis
- max time kernel
148s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/09/2026, 05:56
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
fba6219884f10317afd8805078629ece659f8b3c532d34f99bb38e88f902e245.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
fba6219884f10317afd8805078629ece659f8b3c532d34f99bb38e88f902e245.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target fba6219884f10317afd8805078629ece659f8b3c532d34f99bb38e88f902e245.exe
- Size 2.9MB
- Sample260909-gm2nmasblc
- SHA256 fba6219884f10317afd8805078629ece659f8b3c532d34f99bb38e88f902e245
- MD5 cbf1df566d04f7b9323b3973cfb451ac
- SHA1 a31fe5237bc47a3488981aa194786a192a4a75ec
- SHA512 88cb4659bc6c41932a95f3814b1d308d5b08414b43bc841579dd27ac161ca5f650847e4f47566ffc68af210a4367d2772606f549b4a5cc5d5776725bb4af86e6
- SSDEEP 49152:xzNo2NcIjdpasbXoZLMyN4DjpBls2/89UF7ShAmrYN91JlZLB+kn3Hnx:xi2NcIj/aAoOyN4DjpBls2/sAmu1JlZn
- TLSH T104E57CE1E65F54EBC27A2530817DA378E56DAD304E350247F2533E39EA3D492B91C22B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language fba6219884f10317afd8805078629ece659f8b3c532d34f99bb38e88f902e245.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1496 fba6219884f10317afd8805078629ece659f8b3c532d34f99bb38e88f902e245.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\fba6219884f10317afd8805078629ece659f8b3c532d34f99bb38e88f902e245.exe"C:\Users\Admin\AppData\Local\Temp\fba6219884f10317afd8805078629ece659f8b3c532d34f99bb38e88f902e245.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:1496