Analysis
- max time kernel
150s - max time network
144s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/11/2026, 18:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
77256a16adc8bb602b90eebe1bf95b386a7ba1d937323753fbe401f4908e0c60.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
77256a16adc8bb602b90eebe1bf95b386a7ba1d937323753fbe401f4908e0c60.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target 77256a16adc8bb602b90eebe1bf95b386a7ba1d937323753fbe401f4908e0c60.exe
- Size 2.3MB
- Sample261110-wnhdpscv2w
- SHA256 77256a16adc8bb602b90eebe1bf95b386a7ba1d937323753fbe401f4908e0c60
- MD5 0e30130c25ff357207564a80c956cb17
- SHA1 5fbdf2680bdf27561ec25caa84a0553e9e2dd5a0
- SHA512 2f87941ac23328d2766eef18ca43b0a60e85b070ffabdc182d86e16479bde47052c1fa7c7e5a19167ec21aa89cae6ce296f5f926141283c0bad8c4127da84e68
- SSDEEP 49152:BJOsPLyKP82s4AInu+Ksb+mIHJvKHALgpISt6+5kMXFgjOP9ReHC7BtvqaW:BTPWK02+N+KtKgLmI86+FXqj+9EHC7PE
- TLSH T140B523154A34B8A5C65DC177F24785E78C110C942BD42BE6409AF23A7A3D77BCB1CB2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 77256a16adc8bb602b90eebe1bf95b386a7ba1d937323753fbe401f4908e0c60.exe - Suspicious use of SetWindowsHookEx 5 IoCs
pid Process 3924 77256a16adc8bb602b90eebe1bf95b386a7ba1d937323753fbe401f4908e0c60.exe 3924 77256a16adc8bb602b90eebe1bf95b386a7ba1d937323753fbe401f4908e0c60.exe 3924 77256a16adc8bb602b90eebe1bf95b386a7ba1d937323753fbe401f4908e0c60.exe 3924 77256a16adc8bb602b90eebe1bf95b386a7ba1d937323753fbe401f4908e0c60.exe 3924 77256a16adc8bb602b90eebe1bf95b386a7ba1d937323753fbe401f4908e0c60.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\77256a16adc8bb602b90eebe1bf95b386a7ba1d937323753fbe401f4908e0c60.exe"C:\Users\Admin\AppData\Local\Temp\77256a16adc8bb602b90eebe1bf95b386a7ba1d937323753fbe401f4908e0c60.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:3924