Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
28/09/2026, 04:08
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WinWol_v1010/WinWol.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
WinWol_v1010/WinWol.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
General
- Target WinWol_v1010/WinWol.exe
- Size 1.7MB
- Sample260928-eqebdsvamb
- SHA256 98131692bfa95d1f9d013fb33e67ca832b1b662bc9d83e7f54bacf9048702676
- MD5 348c4257e16ca96a51b39677ace4f5fe
- SHA1 530a58852fe2935f1bb6f97c90e0f6096079aa70
- SHA512 73a4c3492a6cc0d6c86e8d832ee97216bee06585dbaa45ad93d518ca88e611cdf48e30d9fa73c0043f7d46094fdf3eced96226e4b9c4ea22286ceca09859ea40
- SSDEEP 49152:y1/TbuojBzKLoMChnjNuvyN1kZXbI7qgFunTRSPQCcBNmcde1KwJnePR01kzn1:ylbuojpKLoNnjNOy3uXbI+gFUTR1DmcN
- TLSH T178858D317A5194BBC6733931850DA3B9F2AD9A708A7943472B902E3D7E305928D2C77F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language WinWol.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4812 WinWol.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4812 WinWol.exe 4812 WinWol.exe