Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
10/09/2026, 12:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
330b38561d954a2de3068311666a646af3f3176ba60571f3a2c929157c15da8f.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
General
- Target 330b38561d954a2de3068311666a646af3f3176ba60571f3a2c929157c15da8f.exe
- Size 52KB
- Sample260910-pr7z7scl31
- SHA256 330b38561d954a2de3068311666a646af3f3176ba60571f3a2c929157c15da8f
- MD5 b0c83be211fe6968b877ca2dbc866f3c
- SHA1 88ce0bdb01f687471a3789d8809f796552c69dc7
- SHA512 03c5ff840df0e43b5c233a7e5d4127f66447439f991e704608b95f30d29abf6fc20aa2e7fc8688bf74f7bd2518007cf94b3971722c8489bfa686e7a6060d00f9
- SSDEEP 1536:bZZ+VlmoSWVAj6JtoBscbJx/ydOec+NU/4PC:bZZ+9Sia6gB7x/yJc+GAP
- TLSH T17D339E56F534D837D5B6227AD0287F37EBFAAC24003CD943D3A46D9E4D660A3D12A287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 330b38561d954a2de3068311666a646af3f3176ba60571f3a2c929157c15da8f.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeSecurityPrivilege 1908 330b38561d954a2de3068311666a646af3f3176ba60571f3a2c929157c15da8f.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\330b38561d954a2de3068311666a646af3f3176ba60571f3a2c929157c15da8f.exe"C:\Users\Admin\AppData\Local\Temp\330b38561d954a2de3068311666a646af3f3176ba60571f3a2c929157c15da8f.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
PID:1908