Analysis
- user interaction
yes - max time kernel
149s - max time network
140s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
14/10/2026, 04:28
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
setup.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target setup.exe
- Size 2.2MB
- Sample261014-e33vhsv15r
- SHA256 87fa903d40c845c1f7c1a9d6835bd4a753fb538310077569027cadcd6f367352
- MD5 8b7cf356b62666634062df5608148b36
- SHA1 f298dc99a3128d2624e5c01bff22ef373bad6888
- SHA512 97cbf1a053b303f2adc706805179130a081c5c7d825043ca3dcc4905f229027299f31c14fe32ef988858fe972fcc00d1e94b0ef20e201eba562f589ed1934a73
- SSDEEP 49152:Mrtu2vfWbqsJ4qpSWeTSeTVopCN6LsxB9j+4Q0wMmBfACB+LBlKGnR1+uWiYisfq:CtDvfWbqsJ4qpSWeTSeTVopCN6LsxB9D
- TLSH T19BB5C49152348921DBFA1D342B385AE28E20BFDB01ACF19D0B1DF91DE9B3AD348795C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language setup.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\setup.exe"C:\Users\Admin\AppData\Local\Temp\setup.exe"1⤵
- System Location Discovery: System Language Discovery
PID:2688
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:216