Resubmissions
24/07/2026, 06:44
260724-hhjspahn3z328/05/2026, 06:48
260528-hk9rwsax8128/05/2026, 00:28
260528-astrmsd18x328/05/2026, 00:22
260528-an278ad1313Analysis
- user interaction
yes - max time kernel
150s - max time network
154s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
- submitted
28/05/2026, 00:28
General
- Target Goonforcensors_wmN7XI.exe
- Size 50.7MB
- Sample260528-astrmsd18x
- SHA256 d2bcf7daefe87d9bdaf31b769082e65314a1757cb86b161e22b90c502585e320
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\Goonforcensors_wmN7XI.exe"C:\Users\Admin\AppData\Local\Temp\Goonforcensors_wmN7XI.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1252-0-0x0000000000DA0000-0x0000000004054000-memory.dmp
memory/1252-1-0x0000000008E80000-0x0000000009426000-memory.dmp
memory/1252-2-0x00000000089C0000-0x0000000008A52000-memory.dmp
memory/1252-3-0x0000000008B40000-0x0000000008B50000-memory.dmp
memory/1252-4-0x0000000008A70000-0x0000000008A7A000-memory.dmp
memory/1252-5-0x0000000008B40000-0x0000000008B50000-memory.dmp
memory/1252-6-0x0000000008B40000-0x0000000008B50000-memory.dmp
memory/1252-7-0x0000000008B40000-0x0000000008B50000-memory.dmp
memory/1252-8-0x0000000008B40000-0x0000000008B50000-memory.dmp
memory/1252-9-0x0000000008B40000-0x0000000008B50000-memory.dmp
memory/1252-10-0x0000000008B40000-0x0000000008B50000-memory.dmp
memory/1252-11-0x0000000008B40000-0x0000000008B50000-memory.dmp
memory/1252-12-0x0000000008B40000-0x0000000008B50000-memory.dmp