Analysis
- max time kernel
149s - max time network
149s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
- submitted
11/05/2026, 16:53
General
- Target SetupTube-TechCL1Bv2.5.9.exe
- Size 15.1MB
- Sample260511-veclesav9q
- SHA256 34075ca602da6281918be1c78ee8abb91f938a6e54497ee2a2058510cb4cdf95
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Loads dropped DLL 5 IoCs
- Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Drops file in Program Files directory 6 IoCs
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Inno Setup is an open-source installation builder for Windows applications. 1 IoCs
Inno Setup installer
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SetupTube-TechCL1Bv2.5.9.exe"C:\Users\Admin\AppData\Local\Temp\SetupTube-TechCL1Bv2.5.9.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-9PQVV.tmp\SetupTube-TechCL1Bv2.5.9.tmp"C:\Users\Admin\AppData\Local\Temp\is-9PQVV.tmp\SetupTube-TechCL1Bv2.5.9.tmp" /SL5="$4017C,15353168,151040,C:\Users\Admin\AppData\Local\Temp\SetupTube-TechCL1Bv2.5.9.exe"2⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
SetupTube-TechCL1Bv2.5.9.tmp
ISSKINU.DLL
R2RINNO.dll
SKIN.CJSTYLES
memory/5412-5-0x0000000002530000-0x0000000002531000-memory.dmp
memory/5412-14-0x0000000006D90000-0x0000000006DF1000-memory.dmp
memory/5412-17-0x0000000006D90000-0x0000000006DF1000-memory.dmp
memory/5412-27-0x0000000075CE0000-0x0000000075D5C000-memory.dmp
memory/5412-26-0x0000000006D90000-0x0000000006DF1000-memory.dmp
memory/5412-28-0x0000000006D90000-0x0000000006DF1000-memory.dmp
memory/5412-62-0x00000000757B0000-0x00000000759D3000-memory.dmp
memory/5412-65-0x0000000006D90000-0x0000000006DF1000-memory.dmp
memory/5412-84-0x00000000757B0000-0x00000000759D3000-memory.dmp
memory/5412-83-0x00000000774C0000-0x0000000077AC2000-memory.dmp
memory/5412-80-0x00000000774C0000-0x0000000077AC2000-memory.dmp
memory/5412-78-0x0000000074B30000-0x0000000074C57000-memory.dmp
memory/5412-79-0x0000000006D90000-0x0000000006DF1000-memory.dmp
memory/5412-77-0x0000000075720000-0x00000000757A2000-memory.dmp
memory/5412-76-0x00000000757B0000-0x00000000759D3000-memory.dmp
memory/5412-75-0x00000000759E0000-0x0000000075A9F000-memory.dmp
memory/5412-66-0x00000000774C0000-0x0000000077AC2000-memory.dmp
memory/5412-73-0x0000000077170000-0x00000000772BD000-memory.dmp
memory/5412-72-0x0000000076520000-0x00000000765FF000-memory.dmp
memory/5412-71-0x0000000006D90000-0x0000000006DF1000-memory.dmp
memory/5412-70-0x0000000074B30000-0x0000000074C57000-memory.dmp
memory/5412-69-0x0000000075720000-0x00000000757A2000-memory.dmp
memory/5412-64-0x0000000074B30000-0x0000000074C57000-memory.dmp
memory/5412-63-0x0000000075720000-0x00000000757A2000-memory.dmp
memory/5412-58-0x0000000074B30000-0x0000000074C57000-memory.dmp
memory/5412-57-0x0000000075720000-0x00000000757A2000-memory.dmp
memory/5412-56-0x00000000757B0000-0x00000000759D3000-memory.dmp
memory/5412-54-0x00000000774C0000-0x0000000077AC2000-memory.dmp
memory/5412-53-0x0000000006D90000-0x0000000006DF1000-memory.dmp
memory/5412-52-0x0000000074B30000-0x0000000074C57000-memory.dmp
memory/5412-51-0x0000000075720000-0x00000000757A2000-memory.dmp
memory/5412-81-0x00000000757B0000-0x00000000759D3000-memory.dmp
memory/5412-82-0x0000000006D90000-0x0000000006DF1000-memory.dmp
memory/5412-47-0x0000000077170000-0x00000000772BD000-memory.dmp
memory/5412-46-0x0000000076520000-0x00000000765FF000-memory.dmp
memory/5412-45-0x0000000006D90000-0x0000000006DF1000-memory.dmp
memory/5412-44-0x0000000074B30000-0x0000000074C57000-memory.dmp
memory/5412-74-0x00000000774C0000-0x0000000077AC2000-memory.dmp
memory/5412-43-0x00000000757B0000-0x00000000759D3000-memory.dmp
memory/5412-42-0x00000000759E0000-0x0000000075A9F000-memory.dmp
memory/5412-41-0x00000000774C0000-0x0000000077AC2000-memory.dmp
memory/5412-68-0x00000000757B0000-0x00000000759D3000-memory.dmp
memory/5412-67-0x00000000759E0000-0x0000000075A9F000-memory.dmp
memory/5412-61-0x00000000759E0000-0x0000000075A9F000-memory.dmp
memory/5412-59-0x0000000006D90000-0x0000000006DF1000-memory.dmp
memory/5412-55-0x00000000759E0000-0x0000000075A9F000-memory.dmp
memory/5412-50-0x00000000757B0000-0x00000000759D3000-memory.dmp
memory/5412-49-0x00000000759E0000-0x0000000075A9F000-memory.dmp
memory/5412-48-0x00000000774C0000-0x0000000077AC2000-memory.dmp
memory/5412-36-0x0000000006D90000-0x0000000006DF1000-memory.dmp
memory/5412-35-0x0000000006D90000-0x0000000006DF1000-memory.dmp
memory/5412-34-0x0000000074D20000-0x0000000074D52000-memory.dmp
memory/5412-33-0x0000000076020000-0x0000000076045000-memory.dmp
memory/5412-31-0x0000000006D90000-0x0000000006DF1000-memory.dmp
memory/5412-30-0x0000000076020000-0x0000000076045000-memory.dmp
memory/5412-25-0x0000000075CE0000-0x0000000075D5C000-memory.dmp
memory/5412-40-0x0000000077170000-0x00000000772BD000-memory.dmp
memory/5412-24-0x0000000006D90000-0x0000000006DF1000-memory.dmp
memory/5412-39-0x0000000006D90000-0x0000000006DF1000-memory.dmp
memory/5412-38-0x0000000006D90000-0x0000000006DF1000-memory.dmp
memory/5412-37-0x0000000076020000-0x0000000076045000-memory.dmp
memory/5412-32-0x0000000075CE0000-0x0000000075D5C000-memory.dmp
memory/5412-29-0x0000000075CE0000-0x0000000075D5C000-memory.dmp
memory/5412-23-0x0000000075CE0000-0x0000000075D5C000-memory.dmp
memory/5412-157-0x0000000002530000-0x0000000002531000-memory.dmp
memory/5520-0-0x0000000000400000-0x000000000042F000-memory.dmp