2bc68f8823a76fae8ff360cbfcae2bcef7863305e0b700201ac7c0ea7c79f52f

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/06/2026, 03:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
wnetwatcher_setup.exe
Size 568KB
Sample260628-ec33lae14v
SHA256 2bc68f8823a76fae8ff360cbfcae2bcef7863305e0b700201ac7c0ea7c79f52f
MD5 e9c4b160ad57a8957ae59dc4caabc875
SHA1 9f62b2b91d842c3bdd69f749c09242a62ee9ab73
SHA512 2e400a5d538f81e8383ecf3f8fd7497271416604d3d44b62ffa4ce492f4c9415194894daea09e85282dd3c452c4d7453bcd694ded56e974972837a31201d76ad
SSDEEP 12288:USw+OQBxGNZPjv7XLVSVLXs1cGMreMwcbnvXYJ0buziVWqpEA:USw+OQfGnUnsHUvXYzzvA
TLSH
T13AC4235B61C4D437CA2A0D718E7FC3FB92DBEA402D5C4A971F965E367C122C16A068D3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 2 IoCs

pid	Process
5536	wnetwatcher_setup.exe
5536	wnetwatcher_setup.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	wnetwatcher_setup.exe

C:\Users\Admin\AppData\Local\Temp\wnetwatcher_setup.exe
"C:\Users\Admin\AppData\Local\Temp\wnetwatcher_setup.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:5536

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

InstallOptions.dll

Path C:\Users\Admin\AppData\Local\Temp\nseB60E.tmp\InstallOptions.dll
Size 14KB
SHA256 426efd56da4014f12ec8ee2e268f86b848bbca776333d55482cb3eb71c744088
MD5 3809b1424d53ccb427c88cabab8b5f94
SHA1 bc74d911216f32a9ca05c0d9b61a2aecfc0d1c0e
SHA512 626a1c5edd86a71579e42bac8df479184515e6796fa21cb4fad6731bb775641d25f8eb8e86b939b9db9099453e85c572c9ea7897339a3879a1b672bc9226fcee
SSDEEP 192:i6JaVGQ+xI5EeuyvMmGpeWH2J5xprN+AxT7K72dwF7dBdcQOz:i6JaVh4I5rpPbT7+BdhO
TLSH
T13D523A51778888F3E792053EB45237079F9D5226B8929ED1CA331FC22D2B19E2FB1302
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StartMenu.dll

Path C:\Users\Admin\AppData\Local\Temp\nseB60E.tmp\StartMenu.dll
Size 7KB
SHA256 ac53840d019b746ab5dabaa40d7720c9a4487c861b155926454bf8b10bd0963d
MD5 8262fbc2a172ff04146e7587649d7091
SHA1 628be3fede2a79d4b321b12f979711caf77e8a7e
SHA512 8e11f1f1811a424b1ae5ab8e064d5313adc118ee7607f6a6f9b9976647ca6c91496133d5575d4737386a1485f39cf6fd074dbfd619807f42fe148a640186f639
SSDEEP 96:Z+rBC0x22epxPEvC4FkWE+in1/FMvsCGRfRFqCB5tXGhEl5VN:Z+FepxPE1r8/FtmCDtWg5v
TLSH
T1F0E1F87AF7C044F3D68B43702863BB17EB669A211725B163992716CAB5C24E3DC34722
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nseB60E.tmp\ioSpecial.ini
Size 771B
SHA256 b795eaea4d72d66c3ea400d186d30491939d40fc4f83b8bb9f54f5a8e3b37cf7
MD5 48b1cf854cd6e368a8351dcfc94db5f0
SHA1 832e4a632935c2da7070a80712dde93b76a1cb46
SHA512 0ec80b00de7651b8b67facf1c7ae8b4e4f07ab03f5271caea31cb8fe75db8d95969c4c53bd2267c9958bf2041d2c4f6e05ab00097857a12006a9a9211f76c8f1
TLSH
T1C901D0C8805FE369442411EBA0FA37A25BD01C3C4B123CF6F052988B638DCD28AEDDD2
MD5 SHA1 SHA512 TLSH

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nseB60E.tmp\ioSpecial.ini
Size 732B
SHA256 8ddf6d68740017fabc8a68d6cb6e83530131af7395988c351166a3b466385518
MD5 4887746ac45af0e39705726a55b2f0c0
SHA1 ba550ab3b2e194bf848be732e90b24d21774bc0e
SHA512 8ebbc33752ccc4abfb51a40253e20717d10558e1ba5ad8f8f7b6c64ef099cc43745846656ac2861630e36afe4cfeebc93f6575b5b7a1228bf12123071ad4ce80
TLSH
T13B01C088849FE325042051ABA0FD37A14BE01C3C4B123DF7B0569886638D9D34AEDDD2
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads