Analysis
- max time kernel
148s - max time network
141s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/10/2026, 21:43
Behavioral task
behavioral1
Sample
builder.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
costura.dll
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
costura.pdb
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
dnlib.dll
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
guna.ui2.dll
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
windowsinput.dll
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
General
- Target builder.exe
- Size 1.3MB
- Sample261024-1ld1qaet4m
- SHA256 c204f426197d1ce93bcc17e8da08b35037ccd9aed26ced679486143ce91b1fca
- MD5 56f878e7c5ef9796da8ed9e1aa4cc79f
- SHA1 ee63227703ce5e6de454029b91580e0229f1006e
- SHA512 a4ab401b4fc67b7981593a6fb3a763949c74112433aa2019fa1b071f4ce8617227654b89343557c867db8d7fa17cbf829b0326754fdae6b4a347aebaf53392bd
- SSDEEP 24576:QrUmmtav1YlL2ii7vzOMVo+50SHgbuO0MjdM8yfAPnqOTmciow1PmW:QwUtYp0vzhaglH20MjmfeqOTmcNwdm
- TLSH T1DE55231AA60C5C18DE3E3DFA8568D43EB3B11E431D31DB1AA8F48C97FAD53471E22499
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language builder.exe - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS builder.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer builder.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemVersion builder.exe