Overview

overview

10

Static

static

10

Era Setup 1.0.106.exe

windows10-2004-x64

7

Era Setup 1.0.106.exe

windows11-21h2-x64

7

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...er.dll

windows11-21h2-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-21h2-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-21h2-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows11-21h2-x64

3

Era.exe

windows10-2004-x64

7

LICENSES.c...m.html

windows10-2004-x64

4

LICENSES.c...m.html

windows11-21h2-x64

4

binaries/F...er.exe

windows10-2004-x64

1

binaries/F...er.exe

windows11-21h2-x64

1

binaries/vulcan.exe

windows10-2004-x64

1

binaries/vulcan.exe

windows11-21h2-x64

1

d3dcompiler_47.dll

windows10-2004-x64

1

ffmpeg.dll

windows10-2004-x64

1

libEGL.dll

windows10-2004-x64

1

libGLESv2.dll

windows10-2004-x64

1

resources/...li.exe

windows10-2004-x64

1

resources/...li.exe

windows11-21h2-x64

1

resources/...me.dll

windows10-2004-x64

1

resources/...me.dll

windows11-21h2-x64

1

resources/...er.dll

windows10-2004-x64

1

resources/...er.dll

windows11-21h2-x64

1

resources/...dex.js

windows10-2004-x64

3

resources/...dex.js

windows11-21h2-x64

3

resources/elevate.exe

windows10-2004-x64

3

resources/elevate.exe

windows11-21h2-x64

3

vk_swiftshader.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    92s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250610-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250610-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18/07/2025, 22:27

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    resources/elevate.exe
  • Size 105KB
  • Sample250718-2dd67awqz6
  • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10
discovery

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\resources\elevate.exe
    "C:\Users\Admin\AppData\Local\Temp\resources\elevate.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:3548

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads