Overview
overview
10Static
static
10989.exe
windows10-2004-x64
7989.exe
windows11-ltsc_2024-x64
6Annoying-r...er.exe
debian-12-armhf
1AnotherTest.exe
windows10-2004-x64
3AnotherTest.exe
windows11-ltsc_2024-x64
3BEASTY.exe
windows10-2004-x64
BEASTY.exe
windows11-ltsc_2024-x64
5CO2.exe
windows10-2004-x64
8CO2.exe
windows11-ltsc_2024-x64
8Claridonium.exe
windows10-2004-x64
3Claridonium.exe
windows11-ltsc_2024-x64
3Crypto$ucker.exe
windows10-2004-x64
7Crypto$ucker.exe
windows11-ltsc_2024-x64
7DCQPKX (2).exe
windows10-2004-x64
DCQPKX (2).exe
windows11-ltsc_2024-x64
FullMemory.exe
windows10-2004-x64
3FullMemory.exe
windows11-ltsc_2024-x64
3Gayware.py
windows10-2004-x64
3Gayware.py
windows11-ltsc_2024-x64
3HYDRA.exe
windows10-2004-x64
3HYDRA.exe
windows11-ltsc_2024-x64
3JVXB_Destructive.exe
windows10-2004-x64
6JVXB_Destructive.exe
windows11-ltsc_2024-x64
6MBRNOOTER.exe
windows10-2004-x64
MBRNOOTER.exe
windows11-ltsc_2024-x64
MadLocker.exe
windows10-2004-x64
3MadLocker.exe
windows11-ltsc_2024-x64
3Magellan.exe
windows10-2004-x64
Magellan.exe
windows11-ltsc_2024-x64
7Malware.exe.py
windows10-2004-x64
3Malware.exe.py
windows11-ltsc_2024-x64
3Money.exe
windows10-2004-x64
1Analysis
- max time kernel
149s - max time network
116s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
15/09/2026, 02:49
Behavioral task
behavioral1
Sample
989.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
989.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
Annoying-randoizer.exe
Resource
debian12-armhf-20260127-en
Behavioral task
behavioral4
Sample
AnotherTest.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral5
Sample
AnotherTest.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral6
Sample
BEASTY.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral7
Sample
BEASTY.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral8
Sample
CO2.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral9
Sample
CO2.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral10
Sample
Claridonium.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral11
Sample
Claridonium.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral12
Sample
Crypto$ucker.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral13
Sample
Crypto$ucker.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral14
Sample
DCQPKX (2).exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral15
Sample
DCQPKX (2).exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral16
Sample
FullMemory.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral17
Sample
FullMemory.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral18
Sample
Gayware.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral19
Sample
Gayware.py
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral20
Sample
HYDRA.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral21
Sample
HYDRA.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral22
Sample
JVXB_Destructive.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral23
Sample
JVXB_Destructive.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral24
Sample
MBRNOOTER.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral25
Sample
MBRNOOTER.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral26
Sample
MadLocker.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral27
Sample
MadLocker.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral28
Sample
Magellan.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral29
Sample
Magellan.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral30
Sample
Malware.exe.py
Resource
win10v2004-20260911-en
Behavioral task
behavioral31
Sample
Malware.exe.py
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral32
Sample
Money.exe
Resource
win10v2004-20260911-en
General
- Target CO2.exe
- Size 12KB
- Sample260915-da8dvsbn8z
- SHA256 27bb600cb31866cb2dd56f4807064f80cbb7be2421da9923f72fbe401d942210
- MD5 5835d7c3afecf38ae19ff3b8a1c171d0
- SHA1 da0d0b4c8bff5e5e7d63cd84fdf160dd02755c40
- SHA512 ca4b23efd9ce2be384fa9734efa299398e09746b685847a155328f003ba98368ff9c7b8587ab37c7eb79743a50b1dddc9f6232a721b5f394440cdca90936c77d
- SSDEEP 192:JMqe0TPUXfjrQItQ6YTkBSlNC9UVTp80/Yc/75e:mQUnQItQTTk8lNOUVTp3/Yc/g
- TLSH T1D942081097E48276ED320AB238E75242CB73EB579D279BBE358C811B7F332424293361
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Disables Task Manager via registry modification
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language CO2.exe