Overview
overview
3Static
static
3ASYCFILT.dll
windows10-2004-x64
3ASYCFILT.dll
windows11-21h2-x64
3MultiTempl...er.exe
windows10-2004-x64
3MultiTempl...er.exe
windows11-21h2-x64
3OLEAUT32.dll
windows10-2004-x64
3OLEAUT32.dll
windows11-21h2-x64
3OLEPRO32.dll
windows10-2004-x64
3OLEPRO32.dll
windows11-21h2-x64
3Readme.rtf
windows10-2004-x64
1Readme.rtf
windows11-21h2-x64
1SETUP1.exe
windows10-2004-x64
3SETUP1.exe
windows11-21h2-x64
3ST6UNST.exe
windows10-2004-x64
3ST6UNST.exe
windows11-21h2-x64
3STDOLE2.dll
windows10-2004-x64
1STDOLE2.dll
windows11-21h2-x64
1comcat.dll
windows10-2004-x64
3comcat.dll
windows11-21h2-x64
3comdlg32.dll
windows10-2004-x64
3comdlg32.dll
windows11-21h2-x64
3mscomctl.dll
windows10-2004-x64
3mscomctl.dll
windows11-21h2-x64
3msvbvm60.dll
windows10-2004-x64
3msvbvm60.dll
windows11-21h2-x64
3scrrun.dll
windows10-2004-x64
3scrrun.dll
windows11-21h2-x64
3tabctl32.dll
windows10-2004-x64
3tabctl32.dll
windows11-21h2-x64
3vb6stkit.dll
windows10-2004-x64
3vb6stkit.dll
windows11-21h2-x64
3OrB Multi ...me.rtf
windows10-2004-x64
1OrB Multi ...me.rtf
windows11-21h2-x64
1Analysis
- max time kernel
149s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
16/05/2026, 06:11
Static task
static1
Behavioral task
behavioral1
Sample
ASYCFILT.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
ASYCFILT.dll
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
MultiTemplateManager.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
MultiTemplateManager.exe
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
OLEAUT32.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
OLEAUT32.dll
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
OLEPRO32.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
OLEPRO32.dll
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
Readme.rtf
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Readme.rtf
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
SETUP1.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
SETUP1.exe
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
ST6UNST.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
ST6UNST.exe
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
STDOLE2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
STDOLE2.dll
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
comcat.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
comcat.dll
Resource
win11-20260513-en
Behavioral task
behavioral19
Sample
comdlg32.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
comdlg32.dll
Resource
win11-20260513-en
Behavioral task
behavioral21
Sample
mscomctl.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
mscomctl.dll
Resource
win11-20260513-en
Behavioral task
behavioral23
Sample
msvbvm60.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
msvbvm60.dll
Resource
win11-20260513-en
Behavioral task
behavioral25
Sample
scrrun.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
scrrun.dll
Resource
win11-20260513-en
Behavioral task
behavioral27
Sample
tabctl32.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
tabctl32.dll
Resource
win11-20260513-en
Behavioral task
behavioral29
Sample
vb6stkit.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
vb6stkit.dll
Resource
win11-20260513-en
Behavioral task
behavioral31
Sample
OrB Multi Template Manager 1.0/Readme.rtf
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
OrB Multi Template Manager 1.0/Readme.rtf
Resource
win11-20260513-en
General
- Target SETUP1.exe
- Size 244KB
- Sample260516-gxmx8aev4k
- SHA256 4c7ea1f0b856125a1316e7dd19a2702de959a048fc9f2556ec3de351067422b7
- MD5 b9917fc4c836776765e311fff84dd534
- SHA1 63cf6b3992f2058f6a5995293e1017627569f8b5
- SHA512 f092cdbb595814f58240451017f1f392ad18b4dad931694937f46936062579edb01bbd3f0b515c2e3dd1c31afae78af5090433c1a72e07e16b5970a76c647b0f
- SSDEEP 6144:AnIKlBmT0LNn3moSAj0UTp1bDQwZefWnwJsY:Anrdj0UTp1Xth
- TLSH T16134E92263E47B16F2668BF05D760690843ABC314970D94BA6C21F4D7A73E43EB35367
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SETUP1.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4484 SETUP1.exe