Analysis
- max time kernel
150s - max time network
146s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
22/09/2026, 17:34
Behavioral task
behavioral1
Sample
a507d96148d89dfe283857e2a257935d2fddf3fe0d8c373a9e7871d6cedd416a.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
General
- Target a507d96148d89dfe283857e2a257935d2fddf3fe0d8c373a9e7871d6cedd416a.exe
- Size 1.9MB
- Sample260922-v5fe1axtbv
- SHA256 a507d96148d89dfe283857e2a257935d2fddf3fe0d8c373a9e7871d6cedd416a
- MD5 475fc812be62d348587fc8184ae3deb8
- SHA1 5e3294d70a54ce32d6332b6229deea0a7b82a2ad
- SHA512 7720ea3ade3eded1e1aa670cf99b5059dea0e89f77f64a7857966a87d41ddc424af2e1283b0bf04ac8b9dedba24c702412443757efbaf80c7da322ca6720f2bd
- SSDEEP 49152:1K7u32tYISmepTHa1F/1QQXXaE8SBWmkA5e:1K7GHTLi91QQXXaqBWmkA5
- TLSH T1A0953351B5E26528F430707319EF0B2BDB10F5FA97E62B92A6C142A720743E4AF13379
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4868-0-0x0000000000400000-0x0000000000AC4000-memory.dmp upx behavioral2/memory/4868-1-0x0000000000400000-0x0000000000AC4000-memory.dmp upx behavioral2/memory/4868-2-0x0000000000400000-0x0000000000AC4000-memory.dmp upx behavioral2/memory/4868-4-0x0000000000400000-0x0000000000AC4000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language a507d96148d89dfe283857e2a257935d2fddf3fe0d8c373a9e7871d6cedd416a.exe