Analysis
- max time kernel
149s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
- submitted
27/05/2026, 18:06
General
- Target 784e9eefc7a5f0713689288df2056a973bde94cf965ae568b3203ea04e67c3cf.exe
- Size 7.1MB
- Sample260527-wp3e9sg151
- SHA256 784e9eefc7a5f0713689288df2056a973bde94cf965ae568b3203ea04e67c3cf
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
- UPX packed file 28 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\784e9eefc7a5f0713689288df2056a973bde94cf965ae568b3203ea04e67c3cf.exe"C:\Users\Admin\AppData\Local\Temp\784e9eefc7a5f0713689288df2056a973bde94cf965ae568b3203ea04e67c3cf.exe"1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
E2EECore.2.7.2.dll
memory/2452-5-0x0000000010000000-0x00000000105A1000-memory.dmp
memory/2452-17-0x0000000002C30000-0x0000000002C6E000-memory.dmp
memory/2452-19-0x0000000002C30000-0x0000000002C6E000-memory.dmp
memory/2452-47-0x0000000002C30000-0x0000000002C6E000-memory.dmp
memory/2452-49-0x0000000002C30000-0x0000000002C6E000-memory.dmp
memory/2452-51-0x0000000002C30000-0x0000000002C6E000-memory.dmp
memory/2452-52-0x0000000002C30000-0x0000000002C6E000-memory.dmp
memory/2452-46-0x0000000002C30000-0x0000000002C6E000-memory.dmp
memory/2452-41-0x0000000002C30000-0x0000000002C6E000-memory.dmp
memory/2452-39-0x0000000002C30000-0x0000000002C6E000-memory.dmp
memory/2452-37-0x0000000002C30000-0x0000000002C6E000-memory.dmp
memory/2452-35-0x0000000002C30000-0x0000000002C6E000-memory.dmp
memory/2452-33-0x0000000002C30000-0x0000000002C6E000-memory.dmp
memory/2452-31-0x0000000002C30000-0x0000000002C6E000-memory.dmp
memory/2452-29-0x0000000002C30000-0x0000000002C6E000-memory.dmp
memory/2452-25-0x0000000002C30000-0x0000000002C6E000-memory.dmp
memory/2452-23-0x0000000002C30000-0x0000000002C6E000-memory.dmp
memory/2452-21-0x0000000002C30000-0x0000000002C6E000-memory.dmp
memory/2452-15-0x0000000002C30000-0x0000000002C6E000-memory.dmp
memory/2452-13-0x0000000002C30000-0x0000000002C6E000-memory.dmp
memory/2452-11-0x0000000002C30000-0x0000000002C6E000-memory.dmp
memory/2452-9-0x0000000002C30000-0x0000000002C6E000-memory.dmp
memory/2452-6-0x0000000010000000-0x00000000105A1000-memory.dmp
memory/2452-27-0x0000000002C30000-0x0000000002C6E000-memory.dmp
memory/2452-8-0x0000000002C30000-0x0000000002C6E000-memory.dmp
memory/2452-7-0x0000000002C30000-0x0000000002C6E000-memory.dmp
memory/2452-53-0x0000000010000000-0x00000000105A1000-memory.dmp
memory/2452-54-0x0000000010000000-0x00000000105A1000-memory.dmp