Analysis
- user interaction
yes - max time kernel
8s - max time network
10s - platform
windows11-21h2_x64 - resource
win11-20260911-en - resource tags
arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
11/11/2026, 00:46
Behavioral task
behavioral1
Sample
1111111.exe
Resource
win11-20260911-en
2 signatures
150 seconds
General
- Target 1111111.exe
- Size 55KB
- Sample261111-a4msgach96
- SHA256 55e21f666b94c9250a9db72d103edbc3faa45ff30443e5260ddaf7cf695e1488
- MD5 ad55f7e656436f31bd3f2ee40dd733f0
- SHA1 e9c94f686694c92cdf25f8daf152dd784f0b3b6b
- SHA512 e6fef4691055fc636507be06e9fddcea788d272a861c731aeb3e9fc786e5437ec4a5ee69d20d9ed620dbf422626aaa38075841675b7b481b4d35f775ea715a79
- SSDEEP 768:3OCPl+t1Man0KI2NO5SioJ3Q8kSNRmwFvfu0YMDHPsNL7XJSxI3pmwm:3O2sDnXNO5SiKlDIwsNMDkXExI3pmwm
- TLSH T1DB432744BFEA4A05E2BD8F3468F655150634AA63F532EB1F48D668DB13327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain 1111111.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname 1111111.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 1111111.exe