c0e32c10667dc0318db195e7aff8d0bea9e35ae70ed69ff6dda53b2c9e28f471

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
21/06/2026, 04:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
geany-plugins-2.1_setup.exe
Size 11.3MB
Sample260621-ephbnact7y
SHA256 c0e32c10667dc0318db195e7aff8d0bea9e35ae70ed69ff6dda53b2c9e28f471
MD5 4c631682c35df710195b12d45d66d72f
SHA1 b0fd8e88df6fd46a9bf34275632365851609ce0e
SHA512 d00b63ae25d6ec5a41eb3880d6ac09a8c44d464b5f7bd101272a9fcda2f75415328bfeb002198a8e24aa1c4c97e589eff959acec0eba4e0cc6479d0f5eaf03be
SSDEEP 196608:pFX0tNagfRowREbpHRlUq8B/8N4KufJeXEH4YzOkWm6KdnktmzYDhzoT3hF20f:pd4uwgFvUj8N47kUHfqkHNS5Dhs3hQw
TLSH
T147C633259B7808E6C44D9EB13EF38A7207B17F764429B1EF0A88427EFB64714DD63285
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Signatures

Loads dropped DLL 3 IoCs

pid	Process
6600	geany-plugins-2.1_setup.exe
6600	geany-plugins-2.1_setup.exe
6600	geany-plugins-2.1_setup.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\geany-plugins-2.1_setup.exe
"C:\Users\Admin\AppData\Local\Temp\geany-plugins-2.1_setup.exe"
1⤵
- Loads dropped DLL
PID:6600

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsq6BF6.tmp\System.dll
Size 25KB
SHA256 b3bced739f46db4bdad114313bb3a6b35b4d6968f0b7721e987d30dbd0cda354
MD5 da70fcd8f401abd9c8fa6a2dcc2c07d5
SHA1 480921eadce0fb40473029d09b29cbf2264bddfc
SHA512 498fd32e1a40987e4a52fecd7a59b22384740e2b3f56d0b4a5c8f012e085683584fa542ba4b827523d02ac7644fcdc2f6b52afb8bb41107827527d9e444dcbeb
SSDEEP 384:5lTiMPpf08L+1BK5vZEKDSK4oksRkJk0njEEKGh/Gs:3fa8L+iF+ZPkkE4h
TLSH
T192B23B0B73D258BDC617C038D5EB8BB1E233BD412235BA2E1525F1366D75EA0CB1E58A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UserInfo.dll

Path C:\Users\Admin\AppData\Local\Temp\nsq6BF6.tmp\UserInfo.dll
Size 7KB
SHA256 633d83da20a8422a9841f604c01b3ba67b141b256849808716c118e136236721
MD5 65960ce19034a8d411befc4f175e8335
SHA1 244a24e25f072fb828e7f6b778f9930cb2e8a814
SHA512 70d4924356efc4d31ebdf77a905d8ec31458f5be87f50a394e7c8f8feb8fefa98ed40eb245ea307d5ff9c7bbe8b257950f94276e93877fcd38e4bfc20441cc17
SSDEEP 96:lyubewoiLOeI/Zhu0uzkrVdKNzv+2uKKbuajOS2gwiCsJ8rdbVtKbdj:wuC/h+BeKNzvuSW/
TLSH
T179E1B94FB3A12A96C456F27CC1FA5E227CF77D345536621D480111263D34AA1F335746
MD5 SHA1 SHA512 SSDEEP TLSH