Resubmissions
11/05/2026, 17:21
260511-vxfe2afw5z511/05/2026, 17:10
260511-vpp99say4m511/05/2026, 16:45
260511-t9cz1aez6s5Analysis
- max time kernel
300s - max time network
305s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260130-en - resource tags
- submitted
11/05/2026, 17:21
General
- Target Setup.exe
- Size 1009KB
- Sample260511-vxfe2afw5z
- SHA256 a0706de5c6c1b2845c0730135628e05bfcf536fea5f7c64d3681ce289cfa410f
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Setup.exe"C:\Users\Admin\AppData\Local\Temp\Setup.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4844-0-0x0000000000CC0000-0x0000000000D18000-memory.dmp
memory/4844-1-0x00000000FEEA0000-0x00000000FEEA1000-memory.dmp
memory/4844-7-0x00000000FEEA0000-0x00000000FEEA1000-memory.dmp
memory/4844-15-0x00000000FEEA0000-0x00000000FEEA1000-memory.dmp
memory/4844-11-0x00000000FEEA0000-0x00000000FEEA1000-memory.dmp
memory/4844-9-0x00000000FEEA0000-0x00000000FEEA1000-memory.dmp
memory/4844-6-0x00000000FEEA0000-0x00000000FEEA1000-memory.dmp
memory/4844-4-0x00000000FEEA0000-0x00000000FEEA1000-memory.dmp
memory/4844-23-0x00000000FEEA0000-0x00000000FEEA1000-memory.dmp
memory/4844-1232-0x0000000002720000-0x0000000002721000-memory.dmp
memory/4844-1244-0x0000000002780000-0x0000000002781000-memory.dmp
memory/4844-1243-0x0000000002780000-0x0000000002781000-memory.dmp
memory/4844-1247-0x00000000027A0000-0x00000000027A1000-memory.dmp
memory/4844-1248-0x00000000027A0000-0x00000000027A1000-memory.dmp
memory/4844-1246-0x0000000002790000-0x0000000002791000-memory.dmp
memory/4844-1245-0x0000000002790000-0x0000000002791000-memory.dmp
memory/4844-1242-0x0000000002770000-0x0000000002771000-memory.dmp
memory/4844-1241-0x0000000002770000-0x0000000002771000-memory.dmp
memory/4844-1249-0x00000000027B0000-0x00000000027B1000-memory.dmp
memory/4844-1240-0x0000000002760000-0x0000000002761000-memory.dmp
memory/4844-1239-0x0000000002760000-0x0000000002761000-memory.dmp
memory/4844-1238-0x0000000002750000-0x0000000002751000-memory.dmp
memory/4844-1237-0x0000000002750000-0x0000000002751000-memory.dmp
memory/4844-1236-0x0000000002740000-0x0000000002741000-memory.dmp
memory/4844-1250-0x00000000027B0000-0x00000000027B1000-memory.dmp
memory/4844-1235-0x0000000002740000-0x0000000002741000-memory.dmp
memory/4844-1234-0x0000000002730000-0x0000000002731000-memory.dmp
memory/4844-1233-0x0000000002730000-0x0000000002731000-memory.dmp
memory/4844-1231-0x0000000002720000-0x0000000002721000-memory.dmp
memory/4844-1230-0x0000000002710000-0x0000000002711000-memory.dmp
memory/4844-1229-0x0000000002710000-0x0000000002711000-memory.dmp
memory/4844-1228-0x0000000002700000-0x0000000002701000-memory.dmp
memory/4844-1251-0x00000000027C0000-0x00000000027C1000-memory.dmp
memory/4844-1227-0x0000000002700000-0x0000000002701000-memory.dmp
memory/4844-1226-0x00000000026F0000-0x00000000026F1000-memory.dmp
memory/4844-1225-0x00000000026F0000-0x00000000026F1000-memory.dmp
memory/4844-1224-0x00000000026E0000-0x00000000026E1000-memory.dmp
memory/4844-1223-0x00000000026E0000-0x00000000026E1000-memory.dmp
memory/4844-1252-0x00000000027C0000-0x00000000027C1000-memory.dmp
memory/4844-1222-0x00000000026D0000-0x00000000026D1000-memory.dmp
memory/4844-1221-0x00000000026D0000-0x00000000026D1000-memory.dmp
memory/4844-1220-0x00000000026C0000-0x00000000026C1000-memory.dmp
memory/4844-1219-0x00000000026C0000-0x00000000026C1000-memory.dmp
memory/4844-1218-0x00000000026B0000-0x00000000026B1000-memory.dmp
memory/4844-1217-0x00000000026B0000-0x00000000026B1000-memory.dmp
memory/4844-1216-0x00000000026A0000-0x00000000026A1000-memory.dmp
memory/4844-1253-0x00000000027D0000-0x00000000027D1000-memory.dmp
memory/4844-1215-0x00000000026A0000-0x00000000026A1000-memory.dmp
memory/4844-1214-0x0000000002690000-0x0000000002691000-memory.dmp
memory/4844-1213-0x0000000002690000-0x0000000002691000-memory.dmp
memory/4844-1212-0x0000000002680000-0x0000000002681000-memory.dmp
memory/4844-1211-0x0000000002680000-0x0000000002681000-memory.dmp
memory/4844-1254-0x00000000027D0000-0x00000000027D1000-memory.dmp
memory/4844-1255-0x00000000027E0000-0x00000000027E1000-memory.dmp
memory/4844-1210-0x0000000002670000-0x0000000002671000-memory.dmp
memory/4844-1209-0x0000000002670000-0x0000000002671000-memory.dmp
memory/4844-1208-0x0000000001030000-0x0000000001031000-memory.dmp
memory/4844-1207-0x0000000001030000-0x0000000001031000-memory.dmp
memory/4844-1206-0x0000000001020000-0x0000000001021000-memory.dmp
memory/4844-1205-0x0000000001020000-0x0000000001021000-memory.dmp
memory/4844-1204-0x0000000001010000-0x0000000001011000-memory.dmp
memory/4844-1203-0x0000000001010000-0x0000000001011000-memory.dmp
memory/4844-1202-0x0000000001000000-0x0000000001001000-memory.dmp
memory/4844-1201-0x0000000001000000-0x0000000001001000-memory.dmp
memory/4844-1196-0x00000000FF030000-0x00000000FF035000-memory.dmp
memory/4844-1599-0x0000000000CC0000-0x0000000000D18000-memory.dmp
memory/4844-1564-0x0000000000CC0000-0x0000000000D18000-memory.dmp
memory/4844-1786-0x0000000000CC0000-0x0000000000D18000-memory.dmp
memory/4844-1825-0x0000000000CC0000-0x0000000000D18000-memory.dmp
memory/4844-2384-0x0000000000CC0000-0x0000000000D18000-memory.dmp
memory/4844-2683-0x0000000000CC0000-0x0000000000D18000-memory.dmp
memory/4844-1879-0x0000000000CC0000-0x0000000000D18000-memory.dmp
memory/4844-1847-0x0000000000CC0000-0x0000000000D18000-memory.dmp
memory/4844-2733-0x0000000000CC0000-0x0000000000D18000-memory.dmp
memory/4844-3274-0x0000000000CC0000-0x0000000000D18000-memory.dmp
memory/4844-3269-0x0000000000CC0000-0x0000000000D18000-memory.dmp
memory/4844-3674-0x0000000000CC0000-0x0000000000D18000-memory.dmp
memory/4844-3654-0x0000000000CC0000-0x0000000000D18000-memory.dmp
memory/4844-3931-0x0000000000CC0000-0x0000000000D18000-memory.dmp
memory/4844-3930-0x0000000000CC0000-0x0000000000D18000-memory.dmp
memory/4844-3602-0x0000000000CC0000-0x0000000000D18000-memory.dmp
memory/4844-3572-0x0000000000CC0000-0x0000000000D18000-memory.dmp
memory/4844-3535-0x0000000000CC0000-0x0000000000D18000-memory.dmp
memory/4844-3521-0x0000000000CC0000-0x0000000000D18000-memory.dmp
memory/4844-3503-0x0000000000CC0000-0x0000000000D18000-memory.dmp
memory/4844-3489-0x0000000000CC0000-0x0000000000D18000-memory.dmp
memory/4844-3469-0x0000000000CC0000-0x0000000000D18000-memory.dmp
memory/4844-3202-0x0000000000CC0000-0x0000000000D18000-memory.dmp
memory/4844-3163-0x0000000000CC0000-0x0000000000D18000-memory.dmp
memory/4844-3145-0x0000000000CC0000-0x0000000000D18000-memory.dmp
memory/4844-3126-0x0000000000CC0000-0x0000000000D18000-memory.dmp
memory/4844-3181-0x0000000000CC0000-0x0000000000D18000-memory.dmp