Analysis
- max time kernel
148s - max time network
116s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
13/09/2026, 00:17
Behavioral task
behavioral1
Sample
a9257eab94b6e432df431a50799b5144.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
General
- Target a9257eab94b6e432df431a50799b5144.exe
- Size 50KB
- Sample260913-algthahq9v
- SHA256 551b4ef6db5a0c03ae26fb7ef26c9dda0bd856da096bc21404791df196e8a665
- MD5 a9257eab94b6e432df431a50799b5144
- SHA1 edcfb0d7cc03d2d6776e8597e962700f039d760c
- SHA512 dadf12054cb455bcbaf16ee7ee14bb7753ee704ff5ae538ab6330e4b5b0f271492a85416e2b77fb27b5a7519294e9e3eded61aad7bf2081df083dfc9bfe9ebe0
- SSDEEP 1536:chZQuVAg/kAuuqm9EZp6ruUl4rGGRcre9GbMk1nouy8u:cDVn/kAXEZelqPLE4Ooutu
- TLSH T16733E15760670387C37A57798A23292B5C96FE1CC7245BEE97D5383E2CB4B5CB01E980
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3132-0-0x0000000000400000-0x000000000042F000-memory.dmp upx behavioral2/memory/3132-8-0x0000000000400000-0x000000000042F000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language a9257eab94b6e432df431a50799b5144.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3132 a9257eab94b6e432df431a50799b5144.exe