5fbe73c9c09b73a26ca7818a360ac038c149215129da949c76a3f9961c152a1f

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/04/2026, 06:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Setup.exe
Size 3.5MB
Sample260424-g9pmkshw21
SHA256 5fbe73c9c09b73a26ca7818a360ac038c149215129da949c76a3f9961c152a1f
MD5 bc2464ef2b0534c1fb7cea9a09f1931e
SHA1 0fbe6e29cfc23dd9c1ab0dd59e83e437d96a5c74
SHA512 fd7a48fca496edfa3d6476faa960c5434b84d56d764e3af73dd829e3c0484a4afc5e54fac57f8325b96fcc00a9636c7d6b080286f96127ce4bab256370fb5a51
SSDEEP 49152:ZtQQolaKfiBlffWWtkabWRQiltQFHadtlVFCVphirMpNE3qAkCfNQXowaH5:dCaKf0lHWWtkRQiI6dOVjirEa9jeX5aZ
TLSH
T1E1063348FEEEB395D3B14D3C6A336E90557CF85C887A58177F16EBB9CA14882B109309
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Loads dropped DLL 5 IoCs

pid	Process
4676	Setup.exe
4676	Setup.exe
4676	Setup.exe
4676	Setup.exe
4676	Setup.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Setup.exe

C:\Users\Admin\AppData\Local\Temp\Setup.exe
"C:\Users\Admin\AppData\Local\Temp\Setup.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:4676

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsi3209.tmp\System.dll
Size 35KB
SHA256 7b4b8735810b4a266045236b1e936d5e3d0e32570a04f7eb08ad684a5cbcbbb9
MD5 3ff196f43f79759aa0c9b457970ab5b8
SHA1 b85b004e1126c84f7662e57382d585e473701266
SHA512 fcae9e95d712aa98654a80f8c19f481a0e93e06747a57498f2bd1a83ab1b910dbbe49bce19ccb328750c34afd9b41408fce57542283e539885f719a179080671
SSDEEP 384:zCAGCYNs4C/nWxVg8kTM1yTFYgNpwKANy5hmL4/y8RUAQNpwK3yqxgy8RbmL4nNJ:zC9CYNnC/P8kg18TOLk5myr5ALTH+
TLSH
T116F27D234A7068B2DE16CD74B4C969339E7172616AA188C363A6C158CF813D63F7D1BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsNiuniuSkin.dll

Path C:\Users\Admin\AppData\Local\Temp\nsi3209.tmp\nsNiuniuSkin.dll
Size 904KB
SHA256 f125ed6489f16f1681ea92e30f6670f72e0951cd7948df9a043e04ee512ccbeb
MD5 00b5a327b44faaaf7fc373176cd454ed
SHA1 e58ea8e7de259f5d577c01eeac28cc8f72b65094
SHA512 a7c5955652e1dd6f33e6596f0861a2127e4a259ae7abd256a44b3ffc36c1861e29fe3e9a2b60aa5a0230430411c737ef2b2e9170e4f0f42f737039451326340a
SSDEEP 12288:QNeAvlyBkh+B3FAxDG6+zAC1yHbmf4gb7T+C9mOyCcMUubex/AP1fg6uH8h:QNehrB1ABGfGSfJbH+CVUP4fRo8h
TLSH
T104155C11DA81A136EEFB04F2497F66BD9528BA31131450C763C4AEAE8B359F17E31327
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

skin.zip

Path C:\Users\Admin\AppData\Local\Temp\nsi3209.tmp\skin.zip
Size 435KB
SHA256 440ec922b055b1446046a123d47e9d2c693ce90e29593db1a029c71b5f9d028b
MD5 cf1152fd45d03dde35e3b2444f7f7290
SHA1 57bbf6c730c04cfd92abb0406674f360ea0e7b7a
SHA512 f0848e8b0d1daa71ac5e0b5c7e755cd565c55383a77243d3a45811c49b520c1c51340cab501bf8a602b3c8f46dc8348f444fea431b880cbde48f49d1bc49b34f
SSDEEP 6144:5jJ3inuewMAPdGZn32aynBjrpABlc6DVX548C9mTr7SEyrgIcPpKIMPPupCoKKWy:5Nkzn32FByLDVX5pb4HcPAIMXEK38OY
TLSH
T16694234DD226A510DA177E7D9E378E8942A8E7CA8575BF172728F46002CAFB5230F706
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads