11c560d1a7eefdcecfdefbe74edfed02d641269ec82898eb3ccdb7d01e3e0ae2

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260617-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
21/06/2026, 23:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ms3d185setup.exe
Size 6.4MB
Sample260621-3wljnagy21
SHA256 11c560d1a7eefdcecfdefbe74edfed02d641269ec82898eb3ccdb7d01e3e0ae2
MD5 02cd2282aca07f2b32075be47b6c13cd
SHA1 7a3ff25259fcc9ae6d37155ecb7d4379b8c91a4c
SHA512 b2465b7c58c7161b73a85480799ca30c8b1d95f8ff089e658ddd02185de720d640b4b17a51b669fd1ac1a968b5ec9a8144f2fe4b4e70eae06eb92b3585b03f29
SSDEEP 98304:WlTRkmSprawqVgwcDbA6y6NEgUDlAEwkKwYO1jfShZwVzTxIeYFkt3KYu/W:wlkp7UaDbuDyEwkBYW7uw5OeYFkt3KpW
TLSH
T122663322B94CEC5ED86B2E304BB59F3B982D0AE4C5AD5F538A09FB0D1E706E35C15913
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
884	ms3d185setup.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ms3d185setup.exe

C:\Users\Admin\AppData\Local\Temp\ms3d185setup.exe
"C:\Users\Admin\AppData\Local\Temp\ms3d185setup.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:884

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

InstallOptions.dll

Path C:\Users\Admin\AppData\Local\Temp\nsoB340.tmp\InstallOptions.dll
Size 14KB
SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
MD5 325b008aec81e5aaa57096f05d4212b5
SHA1 27a2d89747a20305b6518438eff5b9f57f7df5c3
SHA512 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
SSDEEP 192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
TLSH
T1ED622A11778888F3DBD2013EB4533707AF9D5126B4929ED2CA271ECA6D2B05D7EB2346
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TrialPage.ini

Path C:\Users\Admin\AppData\Local\Temp\nsoB340.tmp\TrialPage.ini
Size 862B
SHA256 0f34c7b47595fb1dc2d56b5792b6bb52aac7c1d7063d545be15669f0bdb4c2af
MD5 19e56389394c72f5eb09057a477b8057
SHA1 2c785471d46e05b0a9f5428d88e7db8cd0d43dc8
SHA512 4a511bacaf8d2c19de6a90b417b156e502ea3754b29fe3cc3fcb9ca4a2708b01b3668b8be5c8301293e511d52d681750fa7519aea05572d3b143af064c14e202
TLSH
T179116B8F524483B750B203601DAFB5DBB7F0202AC35A2075F92DC44187E5EDA4F5D0DA
MD5 SHA1 SHA512 TLSH

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nsoB340.tmp\ioSpecial.ini
Size 704B
SHA256 17bb2367779fcce2a1bcbc8e8075a0e88632994888b5535d1c15444b1b5300d4
MD5 ff7e236daf6318a723df03b173f7ba50
SHA1 1dbaf8b072894e08b4fe4bebca7266c505ea9014
SHA512 e675c7ecfabe3e27f22e9e29acd69516e96eeabdd3f6db35ae3e7a40b046baf14598b20ce211d0aa56f7f614550dcf6a1cb332cbf3bdc46f96dd120a06bd188a
TLSH
T15D017B8DD45FA329042011A664F937968BD02D3C475138F6F0528C86A38D9D38EEDED3
MD5 SHA1 SHA512 TLSH

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nsoB340.tmp\ioSpecial.ini
Size 730B
SHA256 66bf2c5c07db12d26d75750bb1c90a62da366dfa0a5a504c26501edff97491d3
MD5 af0521034fcb71997f3658321ac79a90
SHA1 286563d38086c19df97402bcefb932340527d167
SHA512 edf842fe0c6d9c36f7ef07cdae2fc00b3c93fb8fd1ebbfef3ce1ee81c5d07313eca24ab37d8085bb7442683f27e6c705e7d1e53061bc59c6442c416ddc89a940
TLSH
T164019C89845F9369042011A664F937968BD01D3C475239F6F0528C86A38D9C28AEDDD3
MD5 SHA1 SHA512 TLSH

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nsoB340.tmp\ioSpecial.ini
Size 743B
SHA256 3e5b70743dc7592d0fe631b548abec6f487c2d838e7426215d8ab1e6850f1c67
MD5 045442c5cd809d5e80503fc36e95ca85
SHA1 6576b6829b0332d0f10c00a3855d1b5c5a09cee8
SHA512 b675f0e12270773d3dedeaec40702b768a7c39bb37abd3156200e61da1b21b20924ae80e4b8bf840e96a7377a7589b207026077f59b7e289e8fcfa4aec322a70
TLSH
T1F2019C8D941F93A5042011EA64FA37A69BD01D3C475538F6F0528C86A34DDD28AEDDD3
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads