Analysis
- max time kernel
38s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
- submitted
08/05/2026, 17:07
General
- Target d4f5f0f6e4d3ccafb68e3e261d92fefb981d419703c1803683f9ff11a0a34c49.exe
- Size 784KB
- Sample260508-vmx74abs7x
- SHA256 d4f5f0f6e4d3ccafb68e3e261d92fefb981d419703c1803683f9ff11a0a34c49
Score
7/10
Malware Config
Signatures
- .NET Reactor proctector 1 IoCs
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\d4f5f0f6e4d3ccafb68e3e261d92fefb981d419703c1803683f9ff11a0a34c49.exe"C:\Users\Admin\AppData\Local\Temp\d4f5f0f6e4d3ccafb68e3e261d92fefb981d419703c1803683f9ff11a0a34c49.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4800-0-0x00000000008E0000-0x00000000009AA000-memory.dmp
memory/4800-1-0x0000000005B60000-0x0000000006106000-memory.dmp
memory/4800-2-0x0000000005440000-0x00000000054D2000-memory.dmp
memory/4800-3-0x00000000055B0000-0x000000000564C000-memory.dmp
memory/4800-4-0x0000000005540000-0x0000000005550000-memory.dmp
memory/4800-5-0x0000000005500000-0x000000000550A000-memory.dmp
memory/4800-6-0x0000000005880000-0x00000000058B2000-memory.dmp
memory/4800-8-0x0000000005650000-0x0000000005711000-memory.dmp