39faed10c7c492edda81a7a257168da0185da9329b335693b6a8be34b4b05b40

Analysis

max time kernel
298s
max time network
203s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/04/2026, 04:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
CCNA5_Update_Install.exe
Size 11.8MB
Sample260424-elf97aet7x
SHA256 39faed10c7c492edda81a7a257168da0185da9329b335693b6a8be34b4b05b40
MD5 08c41621bc890961bfecd93ee40e2a49
SHA1 cbe6758021ed9fbb6d8372284857539070a1b049
SHA512 f8f06b30d6561dac06d2cfa6e92ae8aed9d7dbee5a894a726088031a7b9d6a34ef63c44189c267195573cd169ad2eddf38fb94ce3566f9e35348101e5286cce5
SSDEEP 196608:hrlGnzuNOisbN/oICTRPvv+fhteZt1PNg3HDArAKGW9LoMP67OeypDsUKc26E6o8:KnaNOimeTV3+pteZJojKA2FDP6KeyXp9
TLSH
T1D7C633C23028C6DDE1C1E473E3EB9905065B282810FD7F22BF9F961C96279562DCF699
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 3 IoCs

pid	Process
4772	CCNA5_Update_Install.exe
4772	CCNA5_Update_Install.exe
4772	CCNA5_Update_Install.exe

Drops file in System32 directory 1 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\GLBSINST.%$D	CCNA5_Update_Install.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	CCNA5_Update_Install.exe

C:\Users\Admin\AppData\Local\Temp\CCNA5_Update_Install.exe
"C:\Users\Admin\AppData\Local\Temp\CCNA5_Update_Install.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
- System Location Discovery: System Language Discovery
PID:4772

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

GLC2E10.tmp

Path C:\Users\Admin\AppData\Local\Temp\GLC2E10.tmp
Size 161KB
SHA256 a87f19f9fee475d2b2e82acfb4589be6d816b613064cd06826e1d4c147beb50a
MD5 8c97d8bb1470c6498e47b12c5a03ce39
SHA1 15d233b22f1c3d756dca29bcc0021e6fb0b8cdf7
SHA512 7ad0b2b0319da52152c2595ee45045d0c06b157cdaaa56ad57dde9736be3e45fd7357949126f80d3e72b21510f9bf69d010d51b3967a7644662808beed067c3f
SSDEEP 3072:5kgzCh4age/BKZ5akmUbe2Rm9+ORsUIlyR6J7ooLGA5:9zCuagOcZ5ak36pTRTvRKGA5
TLSH
T1B2F36D1E7554A23AC9D3843D20745B329BFF99341356A5D3DB209EEA7DE0AC2AD38307
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GLK2E30.tmp

Path C:\Users\Admin\AppData\Local\Temp\GLK2E30.tmp
Size 33KB
SHA256 bfe7e013cfb85e78b994d3ad34eca08286494a835cb85f1d7bced3df6fe93a11
MD5 517419cae37f6c78c80f9b7d0fbb8661
SHA1 a9e419f3d9ef589522556e0920c84fe37a548873
SHA512 5046565443cf463b6fa4d2d5868879efc6a9db969bf05e3c80725b99bd091ce062cfe66c5551eb1cc5f00a38f2cfcda1f36fb4d60d9ff816c4ec3107b5a0df40
SSDEEP 384:8lB+vEr4Ry91G5GkrCiKY4WyWMmqnXDYjESmvmkIKXMoCu+7/U:Hhy91G5GCCiK1mqXr1
TLSH
T1F6F28416B644C0AAC448063A4C57EFB99A76BC127D201A4BB3B1FF9FBD31341BC22595
MD5 SHA1 SHA512 SSDEEP TLSH