Overview

overview

5

Static

static

5

PeaceSetup.exe

windows10-2004-x64

5

PeaceSetup.exe

windows11-21h2-x64

5

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    18/04/2026, 00:08

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    PeaceSetup.exe
  • Size 53.1MB
  • Sample260418-aez2hadw71
  • SHA256 d007a5efcbe361efbe5ec88eea8eff6191d0188e8c7111354cbb063fbac26f2c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
discovery

Malware Config

Signatures

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\PeaceSetup.exe
    "C:\Users\Admin\AppData\Local\Temp\PeaceSetup.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: GetForegroundWindowSpam
    PID:4368

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Peace.chm
        • Path C:\Users\Admin\AppData\Local\Temp\Peace.chm
        • Size 649KB
        • SHA256 6b8de5a72c1057f37768f487fff7e21d30e1faf36ca82a25f707adcd4e6ff3cc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        YouTube.png
        • Path C:\Users\Admin\AppData\Local\Temp\YouTube.png
        • Size 1KB
        • SHA256 a93a425b641c1dfbf83addfeaf1e7438d571cb49ce617ba863c1c9b1b8b36c27
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        arrow.png
        • Path C:\Users\Admin\AppData\Local\Temp\arrow.png
        • Size 574B
        • SHA256 3e4a7dab25f24d23f3cbbfa55d2d033d4f92cfb8ff911fb9bb1aa6e12c16e69c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        aut2093.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\aut2093.tmp
        • Size 24.2MB
        • SHA256 7b52db74575e7cb59a2fa03d2d79b86f0a5c3ca04178bd216095bee74cf28021
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        download.png
        • Path C:\Users\Admin\AppData\Local\Temp\download.png
        • Size 459B
        • SHA256 b1940b89f14666a26330f483b8af2a549b3d5d313c6edc2bd38e8f3f1bf47481
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        icon.png
        • Path C:\Users\Admin\AppData\Local\Temp\icon.png
        • Size 13KB
        • SHA256 dd1c8ed88d87fdddcbc01e17f5319f6e13a07394d646bff33cb21497eafb62c1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        icontiny.png
        • Path C:\Users\Admin\AppData\Local\Temp\icontiny.png
        • Size 833B
        • SHA256 e68391f5fa3ca80194e4927c1e6cae96770b57483073298dc84dfe3078657773
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        questionmark.png
        • Path C:\Users\Admin\AppData\Local\Temp\questionmark.png
        • Size 522B
        • SHA256 ecd3aaf4960e067f0cc07b4783eb9257218e5f780eea59fa08951f14dda00b34
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        memory/4368-391-0x00000000052E0000-0x000000000539B000-memory.dmp
        Download

        memory/4368-477-0x00000000052E0000-0x000000000539B000-memory.dmp
        Download