Analysis
- max time kernel
40s - max time network
16s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/10/2026, 17:49
Behavioral task
behavioral1
Sample
E6989FE58F96.exe
Resource
win10v2004-20260911-en
2 signatures
40 seconds
General
- Target E6989FE58F96.exe
- Size 1.2MB
- Sample261024-wehccabt7v
- SHA256 4aee25b8a76d99fea4339d5b2155d6cb17698a5ac6dcceefd11c775c78467fa5
- MD5 d86ab8f482e4eed1fdc16bd8cdea41c8
- SHA1 5efc1e85d5670fb87ee76eef3a62e1b3cef1cd54
- SHA512 f1d37a9b50c33ad463a0de85d4058c9b4ad30441bde5c828ac8155af10256c098cbb92c253a7b718826d5a08d520c96ce394c863da3ce31cc36f08c560ca39f2
- SSDEEP 24576:GGA6BJXCwFFH3FTfYuArLyZszRcAwfUGBpR3+eEo:GGTJT3VfYnrbzRZkR3++
- TLSH T11F4523E07D4EC61ED5B8EA758523D5B00F763D218A121A2336EB3F671BB5B21583243B
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4148-0-0x0000000000400000-0x00000000008DB000-memory.dmp upx behavioral2/memory/4148-2-0x0000000000400000-0x00000000008DB000-memory.dmp upx behavioral2/memory/4148-3-0x0000000000400000-0x00000000008DB000-memory.dmp upx behavioral2/memory/4148-4-0x0000000000400000-0x00000000008DB000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language E6989FE58F96.exe