Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
12/10/2026, 14:32
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
wrar401cz.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
wrar401cz.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target wrar401cz.exe
- Size 1.5MB
- Sample261012-rwce7sbv5x
- SHA256 f5cca54daf39c0d56e57482c0dd48fa5d3bdb21c597e7a0bb079a06cca16dadf
- MD5 74bdff99ec629cf477f047edc5d0f43d
- SHA1 1de412919afdc0870992c5f5d8a65d1ca9c81d59
- SHA512 dc03011653fc3ac5407da65e4b827639d3a6ab91d9891138e903ee927cde6f1ffb0d8bfe48c15dd8ae177aa7fd4970c0ff4e89ffb652224681d941af73f3432b
- SSDEEP 24576:DgFamlrlBZsVYKX43wziaYLVCq1H1We9vqM4IawB/qq18A3f/lzd8ob:cHsaI43/Qq1H3xqM43FqLt2M
- TLSH T1017533637A99C4BEE7612330EAD73B13997CEA372AF95042E3601D05783546BA31E713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language wrar401cz.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 996 wrar401cz.exe 996 wrar401cz.exe