b58328e72922321de59531acd139ff829cfc29270108e000956b5a1bd7c928b1

Analysis

user interaction
yes
max time kernel
180s
max time network
124s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260617-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/06/2026, 17:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
mtasa-1.6 (5).exe
Size 129.4MB
Sample260628-v83dyaav7z
SHA256 b58328e72922321de59531acd139ff829cfc29270108e000956b5a1bd7c928b1
MD5 1b47b3e082f6dff2a822f3f7b2202ed8
SHA1 6f1486a83016b91e3add6d872a238dae7dce670a
SHA512 9948570c73297c439b512aaad2d856f5f46ece4cd0332f7c66b291cb71bfe8089a9878b2d95520b24d1d093773781e91dfeba457451a05a73c745fada1f863c4
SSDEEP 3145728:HwAxn2efPnYrRTLYQHgD7bhOt/hdCvAPNJCR6:kDRvYQAD/IpYAFq6
TLSH
T1845833BFAF287D93C09E313C65C27366EB2538680E8D668FCC90D155918B190BDB4F96
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Loads dropped DLL 9 IoCs

pid	Process
5572	mtasa-1.6 (5).exe
5572	mtasa-1.6 (5).exe
5572	mtasa-1.6 (5).exe
5572	mtasa-1.6 (5).exe
5572	mtasa-1.6 (5).exe
5572	mtasa-1.6 (5).exe
5572	mtasa-1.6 (5).exe
5572	mtasa-1.6 (5).exe
5572	mtasa-1.6 (5).exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mtasa-1.6 (5).exe

C:\Users\Admin\AppData\Local\Temp\mtasa-1.6 (5).exe
"C:\Users\Admin\AppData\Local\Temp\mtasa-1.6 (5).exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:5572

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

nsis.log

Path C:\ProgramData\MTA San Andreas All\Common\Installer\nsis.log
Size 403B
SHA256 59159b7ac4654667165ac13e6960f24e9671a89c34574a6aedaf726b9a0952c8
MD5 4885b5e6a0559fb8e1a7d5ef7fcc628a
SHA1 fccf75b6ecc10cf6e36b053e2a75d5dd51b60378
SHA512 bb719a6eda95f46db6d101b22b88e1de6c26108aa699011425cde5bdc4af7f8922ee16f1680fce55dd527969416efad3839028f8c7ff4ba6771b93c21844ab85
TLSH
T138E0D8007EBDB3642D46C7B153475E08E645B4297ABF2228B35DDE5A101312377EEB51
MD5 SHA1 SHA512 TLSH

Submit Download

AccessControl.dll

Path C:\Users\Admin\AppData\Local\Temp\nsd894D.tmp\AccessControl.dll
Size 15KB
SHA256 5fd5d8aec97cffaad9b7df6371b348d436cf1401e86fab614dc4cb8575428e52
MD5 d74bb4447af48da081c7d9b499f3a023
SHA1 dadf6e140e6fd8e49a1851cc144bb022e0adb185
SHA512 9a15de5c6b08914f5e5bbc1c318fb0e84da28a316cf51ccddca8dfb64cd67b7ad06acac307b41d5086a0740055d327007ff890807d6853bb2e767179a3b3d758
SSDEEP 192:0hdGZ2E0hm+Gc7ROMzCPvXWROt086dXHGrEKcDDi0b5ZsgMgiCXyo1Fp01eLLuIt:0hdGZ2E0YWV2908oj21ILud8
TLSH
T1B362A6124FF90BFEF1F16B352AB5553303A2B50124B1C21D5B91CE9A2831B9B5D74327
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InstallOptions.dll

Path C:\Users\Admin\AppData\Local\Temp\nsd894D.tmp\InstallOptions.dll
Size 15KB
SHA256 89dd7d646278d8bfc41d5446bdc348b9a9afaa832abf02c1396272bb7ac7262a
MD5 d1eefb07abc2577dfb92eb2e95a975e4
SHA1 0584c2b1807bc3bd10d4b60d2d23eeb0e6832ca2
SHA512 eaffd9940b1df59e95e2adb79b3b6415fff5bf196ebea5fe625a6c52e552a00b44d985a36a8dd9eb33eba2425ffea4244ed07a75d87284ff51ec9f9a5e1ac65e
SSDEEP 192:E6GQtZkTktEQUrJaZfuyCnSmUsv3sY7L7cW8Y6Q86QvoT311929WtshLAzgSrX8:E6Nt+4t7uJalUnGesY7Lt8nC3/Yosa
TLSH
T186624D1137D598B3E2E62A797EF377138FA5F722A4428E0BC7332E4678565805D78311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LangDLL.dll

Path C:\Users\Admin\AppData\Local\Temp\nsd894D.tmp\LangDLL.dll
Size 5KB
SHA256 131aa0df90c08dce2eecee46cce8759e9afff04bf15b7b0002c2a53ae5e92c36
MD5 549ee11198143574f4d9953198a09fe8
SHA1 2e89ba5f30e1c1c4ce517f28ec1505294bb6c4c1
SHA512 0fb4cea4fd320381fe50c52d1c198261f0347d6dcee857917169fcc3e2083ed4933beff708e81d816787195cca050f3f5f9c5ac9cc7f781831b028ef5714bec8
SSDEEP 48:S46+/sTKYKxbWsptIp5tCZ0iVEAWyMEv9v/ft2O2B8mWofjLl:z+uPbO5tCZBVEAWyMEFv2Cm9L
TLSH
T1D5C1A370B3D248B9C591413778AB33D36612AE747784504FDB6311AA3820AE7AD3EBC2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsd894D.tmp\System.dll
Size 12KB
SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
MD5 192639861e3dc2dc5c08bb8f8c7260d5
SHA1 58d30e460609e22fa0098bc27d928b689ef9af78
SHA512 6e573d8b2ef6ed719e271fd0b2fd9cd451f61fc9a9459330108d6d7a65a0f64016303318cad787aa1d5334ba670d8f1c7c13074e1be550b4a316963ecc465cdc
SSDEEP 192:ljHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZqE0QPi:R/Qlt7wiij/lMRv/9V4bfr
TLSH
T1B1427C1297B089F2F551493419667F2A6FBEAC5C13F405A3CFE304C63D212CB9839243
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UAC.dll

Path C:\Users\Admin\AppData\Local\Temp\nsd894D.tmp\UAC.dll
Size 14KB
SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
MD5 adb29e6b186daa765dc750128649b63d
SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
TLSH
T10F623AAA62E847BEE2221636B96723130BFDB5203DA1D01F4D531E596C30BE3953D61A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nsd894D.tmp\ioSpecial.ini
Size 1KB
SHA256 a812f4e6181d2375553d6c2bacffd93b236a58dbc5462301fc5a8ea116815c9c
MD5 205ab18eaa8a8bc8b0ed2c191ce18ca3
SHA1 7d1e91fef6994e7b6bc394fb4eda2b71ea6a2e49
SHA512 7707ad2659524a4b8138cc29b41d0580967c356aff72acc1f5e91280ff45c507a320d5b539c8c8f9ff7300e255415e7dcf1bfe7007683740ed2bef3b81dded3f
TLSH
T1012190073AFD0514F2BBB718EBB551759B3A7C41A83DD50D91C00A0E49F6B409963BAB
MD5 SHA1 SHA512 TLSH

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nsd894D.tmp\ioSpecial.ini
Size 1KB
SHA256 d6f697c2da7dad21e87df2cba498dbfaf23c90819fed09f72e310d2e070bac1e
MD5 abf6cf4699e74bac674ff71ae8a05de0
SHA1 ba2822b0412ed5f81271bdb9872b41a3ea0cf6c0
SHA512 f6467ee86468f49dc6bed54cac0c2340a4aed31790f43ac42a034946f59cb046e047b498ee262882580401ea49ad217e7cc87579a2380ae99f622f0a3ce7ff8d
TLSH
T1F8218E073AFD4114F2FABB18EFB551759B3A7C41A83DD60D81D00A0E48E5B809963BBB
MD5 SHA1 SHA512 TLSH

Submit Download

nsArray.dll

Path C:\Users\Admin\AppData\Local\Temp\nsd894D.tmp\nsArray.dll
Size 12KB
SHA256 216d68d3f0b37bb2203b3a438a84a089e8c388608f46377ad7e7d6a2709cf9b0
MD5 da4bc09439ed21faf7620a53433aac92
SHA1 94e3347aebe16cb88b9f29f00134d9e0fb67e508
SHA512 920294456e8fee0c4137e4b4ba1389f09ade297d6ed49d78a9593d129dbb5eb048da2cbff7ac29687999991d5f38657cb31af73e2ccf6b8b9ce29480d4d81ec6
SSDEEP 192:LULA8tZt1pehCUVFpZ/XXz5F8qioPYtS/Z8i4NVhWp1h2ph30R:gLAe1peEUD/X1F8qiAFLhOh
TLSH
T14142F8429F9142F2F9F74276B9BD1930292DAD01AB2ABDDB032750582D20DE33E35753
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads