5f0f6f0b0612af1536c61c8a30e3e96fe2b4465f2d401ca0603b5f831dc76590

Analysis

max time kernel
298s
max time network
257s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/04/2026, 04:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
CCNA5_Install.exe
Size 41.3MB
Sample260424-elf97aet7x
SHA256 5f0f6f0b0612af1536c61c8a30e3e96fe2b4465f2d401ca0603b5f831dc76590
MD5 3166f901e54b0c821c0bbc396cf1b572
SHA1 286f6d48392da6955c138e85d3cb50a6b7b14013
SHA512 2822f23566146360a250596ff1084f4c1d2e49ea70dc5048c5e94ea5848bd5fa6f263bc51c8035467280141cae83226420ec5a41ae03ce14a06e95b83fbf6261
SSDEEP 786432:b4+4Dhq7I7pmiCSBKI+TZTEw3/zVI1R6q9tmGbYo9C+5CvBQimOIEPIl2h6KeyUL:b4toypmksI+lTEt5Yo9Cx6MXwlJKJ0
TLSH
T1F89733C9E1344FCEA85BA8F2DF3DA3135357123DA8CE1A276D0E93A49589FD219CE414
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 3 IoCs

pid	Process
1056	CCNA5_Install.exe
1056	CCNA5_Install.exe
1056	CCNA5_Install.exe

Drops file in System32 directory 1 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\GLBSINST.%$D	CCNA5_Install.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	CCNA5_Install.exe

C:\Users\Admin\AppData\Local\Temp\CCNA5_Install.exe
"C:\Users\Admin\AppData\Local\Temp\CCNA5_Install.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
- System Location Discovery: System Language Discovery
PID:1056

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

GLC466A.tmp

Path C:\Users\Admin\AppData\Local\Temp\GLC466A.tmp
Size 161KB
SHA256 a87f19f9fee475d2b2e82acfb4589be6d816b613064cd06826e1d4c147beb50a
MD5 8c97d8bb1470c6498e47b12c5a03ce39
SHA1 15d233b22f1c3d756dca29bcc0021e6fb0b8cdf7
SHA512 7ad0b2b0319da52152c2595ee45045d0c06b157cdaaa56ad57dde9736be3e45fd7357949126f80d3e72b21510f9bf69d010d51b3967a7644662808beed067c3f
SSDEEP 3072:5kgzCh4age/BKZ5akmUbe2Rm9+ORsUIlyR6J7ooLGA5:9zCuagOcZ5ak36pTRTvRKGA5
TLSH
T1B2F36D1E7554A23AC9D3843D20745B329BFF99341356A5D3DB209EEA7DE0AC2AD38307
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GLK468B.tmp

Path C:\Users\Admin\AppData\Local\Temp\GLK468B.tmp
Size 33KB
SHA256 bfe7e013cfb85e78b994d3ad34eca08286494a835cb85f1d7bced3df6fe93a11
MD5 517419cae37f6c78c80f9b7d0fbb8661
SHA1 a9e419f3d9ef589522556e0920c84fe37a548873
SHA512 5046565443cf463b6fa4d2d5868879efc6a9db969bf05e3c80725b99bd091ce062cfe66c5551eb1cc5f00a38f2cfcda1f36fb4d60d9ff816c4ec3107b5a0df40
SSDEEP 384:8lB+vEr4Ry91G5GkrCiKY4WyWMmqnXDYjESmvmkIKXMoCu+7/U:Hhy91G5GCCiK1mqXr1
TLSH
T1F6F28416B644C0AAC448063A4C57EFB99A76BC127D201A4BB3B1FF9FBD31341BC22595
MD5 SHA1 SHA512 SSDEEP TLSH