Overview
overview
3Static
static
3RJ191638-M...ig.exe
windows10-2004-x64
3RJ191638-M...ig.exe
windows11-ltsc_2024-x64
3RJ191638-M...me.ps1
windows10-2004-x64
3RJ191638-M...me.ps1
windows11-ltsc_2024-x64
3RJ191638-M...me.exe
windows10-2004-x64
3RJ191638-M...me.exe
windows11-ltsc_2024-x64
3RJ191638-M...F4.dll
windows10-2004-x64
3RJ191638-M...F4.dll
windows11-ltsc_2024-x64
3RJ191638-M...al.chm
windows10-2004-x64
1RJ191638-M...al.chm
windows11-ltsc_2024-x64
1Analysis
- max time kernel
78s - max time network
68s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
26/10/2026, 14:29
Static task
static1
Behavioral task
behavioral1
Sample
RJ191638-Milky Quest/Config.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
RJ191638-Milky Quest/Config.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
RJ191638-Milky Quest/Data/BasicData/Game.ps1
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
RJ191638-Milky Quest/Data/BasicData/Game.ps1
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
RJ191638-Milky Quest/Game.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
RJ191638-Milky Quest/Game.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
RJ191638-Milky Quest/GuruguruSMF4.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
RJ191638-Milky Quest/GuruguruSMF4.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
RJ191638-Milky Quest/Manual.chm
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
RJ191638-Milky Quest/Manual.chm
Resource
win11ltsc2024-20260911-en
General
- Target RJ191638-Milky Quest/Config.exe
- Size 168KB
- Sample261026-rtspeabc62
- SHA256 b694eac9e16823bc5613c17274e2b3ddd9927e97999149cc4256a76a443286fd
- MD5 cb9844bc9490edaf4571e1f04c2033c9
- SHA1 793e283cd362a76db1f231e4f3932efed802805e
- SHA512 28e5a9c210b2cb2a6a19bd2e17d453100553a93ddc775662219e8d465540bc0c9cd6ae876f1bb4c9d3d266bb53bffc9395e4dc316747b9a09555e5f415864f03
- SSDEEP 3072:8NEo7qRhbrEO6fHb0Q/5PPvQcEcxs2lxl25VhmD:FLhPJyHAQx3Mc22WV
- TLSH T103F3291272D0C4B2E1AB55314DB68FA463B7FC304F35928B27963A1F9E356D28A36353
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Config.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 5100 Config.exe 5100 Config.exe