Analysis
- user interaction
yes - max time kernel
16s - max time network
19s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
19/09/2026, 15:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CEH.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
CEH.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target CEH.exe
- Size 4.1MB
- Sample260919-styfbsxw4l
- SHA256 1d4e50774943b44c0797284d7a01498a8cfeedda65a014ee33ea2333865ed937
- MD5 7a2744e395cb59da73de98fafe11a997
- SHA1 c2cfefa4771ac3c3190ea42d9b49f143f98e669c
- SHA512 199ddabea3a21f29b1844d89ffb807598c5d84c026d44b1946cce17591c47b66535dc784cab3ea2a15151ce2fd6f743561c01246ec113c5f8d1f2d70e2914a23
- SSDEEP 49152:26PxsdeUu+YkL3OvK2f5Y3QAcFxqyBnbNuzfe3LJrWYt08WMW8:DiIUFYfTa3MFuurWM/
- TLSH T11C16BE427832C8E2C54501B5A8673F875D6C4A30C3D46CD7A3D60E9496E62F2B6AFB3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language CEH.exe - Suspicious behavior: EnumeratesProcesses 8 IoCs
pid Process 2032 CEH.exe 2032 CEH.exe 2032 CEH.exe 2032 CEH.exe 2032 CEH.exe 2032 CEH.exe 2032 CEH.exe 2032 CEH.exe