Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/10/2026, 18:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
IESv2025_windows.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
IESv2025_windows.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target IESv2025_windows.exe
- Size 19.5MB
- Sample261009-w2x2bade23
- SHA256 98352312e6e3f853cc9e3bd6898bac3b3582bdca27ab9553ac7dac6fd9d482a2
- MD5 e68f15db2567053a8a865d9b11bd4932
- SHA1 01789d53454e00de89f27b2221bb9d4f7edfa0f3
- SHA512 3a11a228177883a7ec0a3345b30f054f99a48d5a0b15cd8926a83aead80d56185a73465d95be61f323f2b1881c2edc0fc1892061e4421b7d9b529eca45aa71ae
- SSDEEP 393216:1quMuQaapUgGtsnIs8JM1btPxPOhrqKEHQi1tjUGmTaTC4ZYfFNyc1ozBO:sZvA9suAbt9OhO/9UxTafZENyUoA
- TLSH T1072733A837E28565FC6D8934CF77A50385F310B0C6A56CCB9BFA029F7793B801D89A54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language IESv2025_windows.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\i4j_nlog_2
- Size 749B
- SHA256 c531817b53b80eb73a8a1857163636d4e6eb38aac286c7c2fbfc8e2273985938
- MD5 7d5f9041ddadb6fbf0b44ce3c3ebaf6d
- SHA1 7221ac9f7971bcc14aae54bb4eeb013de971a8d2
- SHA512 3dd8eb319efe8e0d158f702c9dd57596e0bc472a9e462bf0803a4a7492f50f543e25a17ee7d597f06dcca7ff1e35d4fbad5f4187041d1899051ccbf0f8c30711
- TLSH T12D01BD02EA83F96AC67E87E22433E708D77A045C26C49960633441DE2653D5CFEEE60A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\i4j_nlog_2
- Size 3KB
- SHA256 a5e2776e26885a8aa4b04e562ae8fab5c2cf4534a18e5cb5c80b2d360171a72e
- MD5 3abf95e9832d849d472aad2089418ad0
- SHA1 51e70dcba30e97fe34b244236ef8071b5aff0e0f
- SHA512 b0220409ba63ac6fc0b45e43d4388750d90dceb1f66883feb34aebaa1e4a2311984f1707ae3326bc595c2e7bc2c26bc2c9e71ec8e3e349be78540ad4a54f0190
- TLSH T1FB61420191C2F22F9F74925B51BBD7A8C3B22C9C3BD5B7329730888A624581DFBE2715
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\i4j_nlog_2
- Size 356B
- SHA256 e6db0170d132062bdef3572bd4c5601f0cc5dcb0480d859597aff402030601e7
- MD5 c32272fab1e0622fb9a8f42c2ec64a8f
- SHA1 e6b813815f06075b14528a8ab45119ff958762df
- SHA512 e874c0b7de27d4f4bcc16bbceb1a291133dc57be49f7e73ae379ab0bb3525e191aa366d902ecc1da5919577a985ffee96727ffb0779b09b48a9d9cc8ee7012f2
- TLSH T1A8E06802E243AAAA857987E324779754932744282084DA70A330559E3242D5DEE99B1A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\i4j_nlog_2
- Size 4KB
- SHA256 81a099e61151d5b5daece566bdaf0be497a8691a02846b95f7018df44826f16b
- MD5 148d297910cf397f8e782d2dc11626b7
- SHA1 41a4d4877a8e835f2f3558002085092deefd00cb
- SHA512 af6d02db4ed85d07d9bc02fdca082a571fdbf66e392382325c3b7f17d69c113c48ff29838b7562b5fb79ed52f2e04925fcce6a0532d0f51b674fdbba3c8e1ec2
- SSDEEP 96:qYnnZzwxTvBF6u6mmSGyry3yG1kCf4pHIHaFm4ANADANAYY8FtMyBMyAMyKMyMsF:qCUBFm4ANADANAYY8jnOgtf4QX
- TLSH T18F910F0152C2F22F4E79C11B60BBD27CCAB62C9C3BD5B7368B248949611591EF7E5B12
- MD5 SHA1 SHA512 SSDEEP TLSH