Analysis
- max time kernel
150s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
26/09/2026, 18:40
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
69341c79d4bc56afa62e0cf5fbab05455389b209df420fab6552f728153d09fe.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
69341c79d4bc56afa62e0cf5fbab05455389b209df420fab6552f728153d09fe.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target 69341c79d4bc56afa62e0cf5fbab05455389b209df420fab6552f728153d09fe.exe
- Size 3.4MB
- Sample260926-xa9rgafg86
- SHA256 69341c79d4bc56afa62e0cf5fbab05455389b209df420fab6552f728153d09fe
- MD5 d68c61048f71b6c420141f4ea90d4be4
- SHA1 e5aa01433c7b79de343cb724d454c92c4767ca53
- SHA512 a8a2ee20d7ed1da33b3bb9e0a3cf31ff684b9cc9596f4175684cc0eeb95aafc0ac4b1cadc6324bfe2d284c9761c9d20d2e53598b022ed2502d19516e6bbfa114
- SSDEEP 98304:WEXKrcrZ7xjq5alnjzfUWpIauXznKEcMhMpxT:HKreVSqnjrUVa0DKEyxT
- TLSH T141F53342B5C1A4B2C96218320A258F71E97CBC717F5266DB57D06ADEEC2B1C027217FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 69341c79d4bc56afa62e0cf5fbab05455389b209df420fab6552f728153d09fe.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 5904 69341c79d4bc56afa62e0cf5fbab05455389b209df420fab6552f728153d09fe.exe 5904 69341c79d4bc56afa62e0cf5fbab05455389b209df420fab6552f728153d09fe.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\69341c79d4bc56afa62e0cf5fbab05455389b209df420fab6552f728153d09fe.exe"C:\Users\Admin\AppData\Local\Temp\69341c79d4bc56afa62e0cf5fbab05455389b209df420fab6552f728153d09fe.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:5904