Analysis
- max time kernel
149s - max time network
138s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
09/10/2026, 15:11
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
IESv2025_windows.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
IESv2025_windows.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target IESv2025_windows.exe
- Size 19.5MB
- Sample261009-sknvjayth1
- SHA256 98352312e6e3f853cc9e3bd6898bac3b3582bdca27ab9553ac7dac6fd9d482a2
- MD5 e68f15db2567053a8a865d9b11bd4932
- SHA1 01789d53454e00de89f27b2221bb9d4f7edfa0f3
- SHA512 3a11a228177883a7ec0a3345b30f054f99a48d5a0b15cd8926a83aead80d56185a73465d95be61f323f2b1881c2edc0fc1892061e4421b7d9b529eca45aa71ae
- SSDEEP 393216:1quMuQaapUgGtsnIs8JM1btPxPOhrqKEHQi1tjUGmTaTC4ZYfFNyc1ozBO:sZvA9suAbt9OhO/9UxTafZENyUoA
- TLSH T1072733A837E28565FC6D8934CF77A50385F310B0C6A56CCB9BFA029F7793B801D89A54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language IESv2025_windows.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\i4j_nlog_2
- Size 749B
- SHA256 d8a5481d5e8be1e5a745e7f05050736cada22bf18f9393aef9e69e67c85ab2bc
- MD5 d19311cb05454396a37c5e16d3052c0e
- SHA1 703cbe6b22b7aace219c3c530b1327d4dee46cd1
- SHA512 6cf5d21482e28be05db52f000358efd35b4d6253eff0e1742d93150be68f943d645aefe6fb4d72f1b5c34997762af5d5605cc490d2df272e203a53543a8193f0
- TLSH T1E401BD02EA83F96B867E87E22433E708D77A045C26949920633041DE2653D5CFFEE60A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\i4j_nlog_2
- Size 3KB
- SHA256 eefce6fd7cb2cd29409524bfe962162a0637cb45d08dede6356f717aa48ad77b
- MD5 787c45d2a51e906997121f75f3d06126
- SHA1 52b1328344a89ba48af20dc15e7dda28cda6d516
- SHA512 c85f79fb4e9699170d4bca186c006fbd200dc28ea47beb1b9e382374a14d1069c24c9e7295077e83083049e725bab7892f86cc033d63b0c8edf2348faaf6aaf3
- TLSH T1A5616501A1E3F32D9B34525722BBD798C379389C3B95BF2097308889A24545DFBE6725
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\i4j_nlog_2
- Size 553B
- SHA256 df8422ccfef1242361a28f53530d32fe77070c81f6c9d1732dd73a18895be6fc
- MD5 1cf19006ffa99aa0e60ca52a40398807
- SHA1 c55d65c5f84fbf934d7955a7e548d147ff7afd72
- SHA512 cb9144d1973338d6452f902edf71eaa7c9c3e682cfe35d04c8daa09f3a1f66d2a6d4e9c119760212d9df5ff248ee2d2d6d574cc3cce9457512c152375cb366bf
- TLSH T18BF0E101E6C3EA2B847D82E32573A708C77F045D26949620633041CE3642D0DEBDEA06
- MD5 SHA1 SHA512 TLSH