Analysis
- max time kernel
149s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
10/09/2026, 00:15
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Descompactador.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Descompactador.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target Descompactador.exe
- Size 36KB
- Sample260910-ajwvmsvtas
- SHA256 d64839f75b8cc5cbb87716ba9c81f9b23d63d9370541bd7cb1a400d1f6d7dc58
- MD5 e034ed9bc778d14a43a992b5b4aad826
- SHA1 58382453cd2ca9987f458d9a3a2a1c10a164cb01
- SHA512 f3e433e887c07d845a4e37bea921240f911ce3df78515572eeea26f64ddb1b68513c9901f878a783de25f9cf88362fb0580b368837d5c3b5678d3a98bd360d8b
- SSDEEP 384:zCoNRBKKQMUCyxogtcRg8S28AQMUuCoNRBK:zCo1KKQEyxbc7S28AQQCo1K
- TLSH T191F206132AACE471F3598BB1CDA289ED4565BC329D00AD4B244DBF4F6C726429DBC31E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Descompactador.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2340 Descompactador.exe