Analysis
- max time kernel
149s - max time network
138s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
10/09/2026, 12:50
General
- Target 3445ae1dfa5c8d97250820c3cec03ea11d8b6935e5308f815bf35d0d67084f37.exe
- Size 53KB
- Sample260910-p3a5lsxtgw
- SHA256 3445ae1dfa5c8d97250820c3cec03ea11d8b6935e5308f815bf35d0d67084f37
- MD5 78154ceae28cd4dbcd87752da1d9cea8
- SHA1 65b2df06f067125ff8cb90801123cbcbdaf0a193
- SHA512 de037bc8090d877c2ac1b10b8c7d3b965e52475c5f66ca3e4a4163f1a711cea92d3cb3565b98e2e5e0136c72a9c640c56374d3374a30952291b8615cf0221853
- SSDEEP 768:Ah3qitxsLKP7GpnQ0ZnwixOEUM9laqZstdUjmsk2g5XRy/98OAbPoO2MdubQ6x:I3qRLK2Q0hUEUUeUj0y/D7MdAx
- TLSH T1BF335C13E7E18475E0B2CEB05D26D1158A37BE362C38641932DD5EDE9F3B691D80A3A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 3445ae1dfa5c8d97250820c3cec03ea11d8b6935e5308f815bf35d0d67084f37.exe - Inno Setup is an open-source installation builder for Windows applications. 2 IoCs
Inno Setup installer
resource yara_rule behavioral1/memory/816-2-0x0000000000400000-0x0000000000414000-memory.dmp innosetup behavioral1/memory/816-3-0x0000000000400000-0x0000000000414000-memory.dmp innosetup