Analysis
- max time kernel
148s - max time network
152s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260617-en - resource tags
- submitted
28/06/2026, 14:30
General
- Target GalacticToolsV3.exe
- Size 17.0MB
- Sample260628-rt67sshw8y
- SHA256 fb878cc5c79b9b3e396e13f71ac7bf22f5ece22a91e61ef099e1b7beafe73285
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Enumerates system info in registry 2 TTPs 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\GalacticToolsV3.exe"C:\Users\Admin\AppData\Local\Temp\GalacticToolsV3.exe"1⤵
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3944-0-0x0000000074482000-0x0000000074483000-memory.dmp
memory/3944-1-0x0000000000080000-0x000000000117E000-memory.dmp
memory/3944-2-0x00000000062D0000-0x000000000688A000-memory.dmp
memory/3944-3-0x0000000005D10000-0x0000000005DA2000-memory.dmp
memory/3944-4-0x0000000074470000-0x0000000074C2C000-memory.dmp
memory/3944-5-0x0000000005C90000-0x0000000005CAA000-memory.dmp
memory/3944-6-0x0000000005DE0000-0x0000000005DEA000-memory.dmp
memory/3944-7-0x0000000005FA0000-0x0000000006196000-memory.dmp
memory/3944-8-0x0000000009DE0000-0x0000000009E92000-memory.dmp
memory/3944-9-0x0000000074470000-0x0000000074C2C000-memory.dmp
memory/3944-10-0x0000000074482000-0x0000000074483000-memory.dmp
memory/3944-11-0x0000000074470000-0x0000000074C2C000-memory.dmp