Overview
overview
3Static
static
3YQArch_big...te.chm
windows10-2004-x64
1YQArch_big...te.chm
windows11-ltsc_2024-x64
1YQArch_big..._bk.js
windows10-2004-x64
3YQArch_big..._bk.js
windows11-ltsc_2024-x64
3YQArch_big...up.exe
windows10-2004-x64
3YQArch_big...up.exe
windows11-ltsc_2024-x64
3YQArch_big...st.exe
windows10-2004-x64
3YQArch_big...st.exe
windows11-ltsc_2024-x64
3YQArch_big...ch.dll
windows10-2004-x64
1YQArch_big...ch.dll
windows11-ltsc_2024-x64
1YQArch_big...lp.chm
windows10-2004-x64
1YQArch_big...lp.chm
windows11-ltsc_2024-x64
1YQArch_big...us.bat
windows10-2004-x64
3YQArch_big...us.bat
windows11-ltsc_2024-x64
3Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
13/11/2026, 04:03
Static task
static1
Behavioral task
behavioral1
Sample
YQArch_big5/sys/donate.chm
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
YQArch_big5/sys/donate.chm
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
YQArch_big5/sys/library/acaddoc_bk.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
YQArch_big5/sys/library/acaddoc_bk.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
YQArch_big5/sys/setup.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
YQArch_big5/sys/setup.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
YQArch_big5/sys/uninst.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
YQArch_big5/sys/uninst.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
YQArch_big5/sys/yqarch.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
YQArch_big5/sys/yqarch.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
YQArch_big5/sys/yqhelp.chm
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
YQArch_big5/sys/yqhelp.chm
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
YQArch_big5/sys/yqkillcadvirus.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
YQArch_big5/sys/yqkillcadvirus.bat
Resource
win11ltsc2024-20260911-en
General
- Target YQArch_big5/sys/setup.exe
- Size 40KB
- Sample261113-emb2vszw2k
- SHA256 3bd67be970a6e1977de5a2f71e4382728e6cee8e4841c50100601e436d9ede76
- MD5 1fe95d9cefb89a254256aaac095cdb29
- SHA1 ecdf9d220c1455aab8327ccf0921cc103e3de267
- SHA512 732fdec99e5a30b7d244160fb788a7af3038a5e12d5ddd9f6211cb761f5c62afaaf9088cfed2a7b7cbba2d36fc89ba35d73f1904fae0daa173d26e6067fe706a
- SSDEEP 384:vBOy0QIPEfmkioSKCmCbh5xdV2caSGu2sXG2BloJccHk0DyK9F8/jmaDd31EjIQK:v8QIhgi8GjvJFEj/Q8oAClN
- TLSH T1CF03C726E7584573FA4983B02F7925DA65212C321A00DE0777C6BFAD2A32583B8F471F
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language setup.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 904 setup.exe