Analysis
- max time kernel
150s - max time network
134s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/09/2026, 12:27
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Ravin.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Ravin.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target Ravin.exe
- Size 89.2MB
- Sample260930-pm2ydsfc65
- SHA256 7679334f8806938a33c5c04e10b31cdf6d5ceec308a5619e02b5766a354b7ec5
- MD5 e2b33eed6f920800ba6d54953aee3b0a
- SHA1 719c016d544502cb3466516443d866eb405183d7
- SHA512 490f753db366926135015ef17cda72591b1126d8c9a632d0b9c28c4a0dcf68183da4d171fc8790b4dea7ed0104f116f988e8ede765d6b792827a3455c57f40e6
- SSDEEP 786432:neP8RA2m5tdt5Utd4iTKMn3KhvBDRf4f6VkkmhYYZLLwC5Kf:nekRZMtd0tdxTKMnahvBDpuSkkmSp
- TLSH T1E9286C12F6408D35C09A0B3E495B867063326C5B9FA3A39721DCBB7D3DBA3805E76746
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Ravin.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2444 Ravin.exe 2444 Ravin.exe 2444 Ravin.exe 2444 Ravin.exe