62faa0e58b390e11501226bbee984d95bf329c906c31f5f436b9e72005770922

Analysis

max time kernel
149s
max time network
96s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
16/04/2026, 06:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
KakaoTalk_S8542up.exe
Size 112.6MB
Sample260416-hppbraht7p
SHA256 62faa0e58b390e11501226bbee984d95bf329c906c31f5f436b9e72005770922
MD5 5f1eed974b3c83d46c12c88bf1cbfbb3
SHA1 623e5ed8aa82cf06422cab36f47dd61f08869a07
SHA512 d7719d561d79d3eb8fcfc174b4a3d0630b0800213da4722699505f22837e4c6f699bad661309c4946427242e8cdef999691e49265b31621c3e304eaac79a58b8
SSDEEP 1572864:HwN90q/k9tN2eKY++NG4/Tp4oAtjsPi6ZlTIu2fsC5+4NPBmt3SX+549Mf:HW90p/io4tjB6ZFIuJC5RPEhSuee
TLSH
T15C4823A9729460F8C6A7C374843B4127F33A3C1A2724C6C7B258F9A93E756C69137F25
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 2 IoCs

pid	Process
1144	KakaoTalk_S8542up.exe
1144	KakaoTalk_S8542up.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	KakaoTalk_S8542up.exe

C:\Users\Admin\AppData\Local\Temp\KakaoTalk_S8542up.exe
"C:\Users\Admin\AppData\Local\Temp\KakaoTalk_S8542up.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:1144

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

InstallOptions.dll

Path C:\Users\Admin\AppData\Local\Temp\nscFE85.tmp\InstallOptions.dll
Size 15KB
SHA256 1f8e8f336df6773d6b63bd5a7efbfc889d08888fec55da402eaf93cb950aa283
MD5 90bb49f3fd416f912a637526914bd044
SHA1 626051dd6c759a5b847664549736c37aba9ede5a
SHA512 5156923f51be2057f7003577b46732f6b0b0bb55402f49df3747085b9802b3a2492cd5f087ef988db5a69f241c10163ada0e649b149da8a198b7fc2cc83334e5
SSDEEP 384:E5C43tPegZ3eBaRwCPOYY7nNYXCA/Yosa:EQTgZ3eBTCmrnNAE
TLSH
T17A624C1137C558B3E2D62A797EE2B7138FA5F722A4438E0BC7332E06281A5956E7C311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nscFE85.tmp\ioSpecial.ini
Size 1KB
SHA256 3b078cf3c4dc40ace37ca3d7dc1638326bf59e3e0d1fdab50008f7dde8aef65a
MD5 f4b2f37e491f3b08e316b89f4e2305ce
SHA1 5200afa0ec2e83e04467c845bcc26c0303799f0f
SHA512 35948c67ff61e78bd77917361a8cc1ebc43569d43c1f8d44b3b8904684f7370423c3d0980ac30aa7e56d7c66da0f940ea8a68ae104b53112ef417db6adf5cc31
TLSH
T1812136173DF90A18E37BF618EBF4803983397406945DC61EA1C20A0E44E6B818523BEF
MD5 SHA1 SHA512 TLSH