Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    131s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260130-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    03/05/2026, 03:20

General

  • Target
    ultimate-teto-night.exe
  • Size 351.4MB
  • Sample260503-dv2f2saz5x
  • SHA256 77e69f7ff61c0956a971491925c64ef63a2fe0380a2d64146a75396c621de73b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 10 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ultimate-teto-night.exe
    "C:\Users\Admin\AppData\Local\Temp\ultimate-teto-night.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:3384

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Layer.mfx

        • Path C:\Users\Admin\AppData\Local\Temp\mrt5270.tmp\Layer.mfx
        • Size 122KB
        • SHA256 9e9d49c81e02cdef2ea10f53fee958bb750a96e7567d680f86202f0e28e267a8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cctrans.dll

        • Path C:\Users\Admin\AppData\Local\Temp\mrt5270.tmp\cctrans.dll
        • Size 347KB
        • SHA256 9b834b5d26983451ef3a11c8c2a715724daa188fbd28597081ecb1e9ed672f87
        • MD5 SHA1 SHA512 SSDEEP TLSH

        kcini.mfx

        • Path C:\Users\Admin\AppData\Local\Temp\mrt5270.tmp\kcini.mfx
        • Size 330KB
        • SHA256 5af175ffb932fb653873dad095dd40f2ab8d3fb56f287213c21bb68652ddad2d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mmf2d3d11.dll

        • Path C:\Users\Admin\AppData\Local\Temp\mrt5270.tmp\mmf2d3d11.dll
        • Size 541KB
        • SHA256 5f6563d6bf2f3ceab8b2ca2c15ba4f7fe882a82c1f72b10041b5692c6515a53a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mmf2d3d9.dll

        • Path C:\Users\Admin\AppData\Local\Temp\mrt5270.tmp\mmf2d3d9.dll
        • Size 1.5MB
        • SHA256 bddda991185a9e83b9855a109f2fcfa78cd2d5402e9db344c6ec77f6ce69a0c5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mmfs2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\mrt5270.tmp\mmfs2.dll
        • Size 768KB
        • SHA256 763ef4484ba9b9e10e19268c045732515f0ac143cf075e6d1ea1f5adcc77633b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mp3flt.sft

        • Path C:\Users\Admin\AppData\Local\Temp\mrt5270.tmp\mp3flt.sft
        • Size 24KB
        • SHA256 81c9a9459a8e124793addf142cd513945d6fe600e1d67f74897898d7570e56b2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ultimatefullscreen.mfx

        • Path C:\Users\Admin\AppData\Local\Temp\mrt5270.tmp\ultimatefullscreen.mfx
        • Size 73KB
        • SHA256 fd179783ff6e6eb0959185087f33ed4a1b256e58762d9817bcb16888e20f7058
        • MD5 SHA1 SHA512 SSDEEP TLSH

        waveflt.sft

        • Path C:\Users\Admin\AppData\Local\Temp\mrt5270.tmp\waveflt.sft
        • Size 8KB
        • SHA256 92a5053cf5973a6aa228c738d55387f12f1dfa8a837d7b938c60f05b6b56b3ad
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/3384-36-0x0000000001590000-0x00000000016B0000-memory.dmp