Analysis
- max time kernel
36s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
25/09/2026, 11:17
Behavioral task
behavioral1
Sample
123.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
123.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
out.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
out.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
General
- Target 123.exe
- Size 1.9MB
- Sample260925-nd6dsaz1fv
- SHA256 7305757e3b6838ca5585dfcc19c4d35964cd6a2fcdd6ca32d233b77b08cb9800
- MD5 0702d12cb676b558c0d66c3db66fe841
- SHA1 c909f4df2552acfeb4c8be9ed6d6a943e3ee5b0e
- SHA512 2745030c98082be1b502a7621ec746d1d34ea74e7bff3fb15e03cba8301b526469f079d852798730898d72c4ff418aac9f191c24a29ba2bdbee8bbb1d99121ae
- SSDEEP 12288:6mOKMMRFseUvaTiiX3Q8FJ8VFIREGMgg0+ut17pIRzQQbQQRQtzQsQQFvFQczQXh:+KMMflpdEJ0+ut7o91hGhaDmoJ
- TLSH T15595E622FA008A7AC52018FD7757D69DBFBA0456FD40E6A8C7D4CBA6DE7A07070464E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/5940-0-0x0000000000400000-0x0000000000737000-memory.dmp upx behavioral2/memory/5940-2-0x0000000000400000-0x0000000000737000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 123.exe