95d5594cac9cfa5826e1c0b12fec980ff8a01136364aed2831164b46cbb13ca1

Analysis

max time kernel
898s
max time network
517s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260130-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260130-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
22/02/2026, 01:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
The-MALWARE-Repo-master/Trojan/Mist/MistInstallerRC.exe
Size 83KB
Sample260222-cdtt7sb16e
SHA256 95d5594cac9cfa5826e1c0b12fec980ff8a01136364aed2831164b46cbb13ca1
MD5 d81acaef0db08aac297d4bd3c58ddf50
SHA1 02e6ac2c001c639078c3e842132f91509a6f7466
SHA512 45b1f047816f4ba8e730cf6914331f9ced81c1e6614f594a748eb6469efb2f311f0ef86e3241cafb2794b580df14302f9cb279175bc1064e79c6c501fa2dc738
SSDEEP 1536:ryD2eyujEyC5YYafh1Mc8/gsWjcdjl9btC:r+2eytf3B9bQ
TLSH
T128838D03B6D184B0E9F30A310CB9D9508B7FBD664E748E572398669D4E741E0AE39B27
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Malware Config

Signatures

Drops file in Drivers directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\drivers\mistdrv.sys	MistInstallerRC.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MistInstallerRC.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
672	Process not Found

C:\Users\Admin\AppData\Local\Temp\The-MALWARE-Repo-master\Trojan\Mist\MistInstallerRC.exe
"C:\Users\Admin\AppData\Local\Temp\The-MALWARE-Repo-master\Trojan\Mist\MistInstallerRC.exe"
1⤵
- Drops file in Drivers directory
- System Location Discovery: System Language Discovery
PID:4476

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4476-1-0x00000000010B0000-0x00000000011D0000-memory.dmp

Download