Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
22/09/2026, 18:58
Static task
static1
Behavioral task
behavioral1
Sample
NII.exe
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral2
Sample
NII.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral3
Sample
NII.exe
Resource
android-x86-arm-20260721-en
Behavioral task
behavioral4
Sample
NII.exe
Resource
android-x64-20260325-en
Behavioral task
behavioral5
Sample
NII.exe
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral6
Sample
NII.exe
Resource
debian12-armhf-20260127-en
Behavioral task
behavioral7
Sample
NII.exe
Resource
debian12-mipsel-20260513-en
Behavioral task
behavioral8
Sample
NII.exe
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral9
Sample
NII.exe
Resource
ubuntu2004-amd64-20260513-en
Behavioral task
behavioral10
Sample
NII.exe
Resource
ubuntu2204-amd64-20260513-en
General
- Target NII.exe
- Size 417KB
- Sample260922-xmkccavy6k
- SHA256 15227259675289892ce97b9666c43bdb12f4e961a022f84de3facfab546a4c7e
- MD5 c0c2f6117db5fdd924b5191fa361f5c4
- SHA1 fda9bb2c0c8f78ad388d4ece495ba3f0b74b3136
- SHA512 ad0c80a22f93fa30a5596c995d7d0e72c2b67fe3b8953b0042a745e88534689f4379d5567464ac6c27269e8116819a09b7ad4c69a303b1f770a55cb943d9cecf
- SSDEEP 6144:tBgYNPiDpD4pQtW6xezGDBI9QdnI5uqjnfAFGuStmaPFvq3gECxJt:tBgKid4pMWMDSyxSjnfeIh9vq3gEa
- TLSH T1FF947B11F551D076D1A540B0FA6EABEF287C1A74171414D3F3D86B693BF00E32AF6AA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language NII.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2352 NII.exe