Analysis
- user interaction
yes - max time kernel
250s - max time network
245s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
16/09/2026, 06:36
General
- Target Zemana.AntiLogger.Setup.exe
- Size 12.3MB
- Sample260916-hdchtatzay
- SHA256 596ed7b53becb8b80761f89117b472cd20c52268a4d7d3a3f6c1d9dea28b0889
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Zemana.AntiLogger.Setup.exe"C:\Users\Admin\AppData\Local\Temp\Zemana.AntiLogger.Setup.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\pcaui.exe"C:\Windows\system32\pcaui.exe" -g {11111111-1111-1111-1111-111111111111} -x {a10791bc-5ffa-4adb-872a-19985abcf977} -a "Zemana AntiLogger" -v "Zemana Ltd." -s "This app can't run because it causes security or performance issues on Windows. A new version may be available. Check with your software provider for an updated version that runs on this version of Windows." -n 2 -f 0 -k 0 -e "C:\Users\Admin\AppData\Local\Temp\Zemana.AntiLogger.Setup.exe"2⤵
-