fc7e1ac80a7d2c0121e083d218b7369c4d217eccaf395cd1c0292d000f19446b

Analysis

max time kernel
149s
max time network
127s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
01/07/2026, 03:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Plugins/Steamless.Unpacker.Variant31.x86.dll
Size 16KB
Sample260701-d3grlsfv3w
SHA256 fc7e1ac80a7d2c0121e083d218b7369c4d217eccaf395cd1c0292d000f19446b
MD5 2c7a10fb35202e73632b2637426d9d1b
SHA1 ef2a8cca203e05f6728a6d0bc61aefa5c22b650c
SHA512 f502215a110d11bf6e52139e59553375c3d65f093859935fe5611b5ddcfdd1c5c2aa86696ace1a99720ec6bdd2e778c354f7cf7c393dc69a5ebf7894a3d0f7ac
SSDEEP 384:bCSyGvzGvVFjnv3logr87Q1AK8QG2neA:QkzGvVJnPlDVG74
TLSH
T17A72A60656E0A31AE5FF2B3568B247135BB5F955FEB0CA1F884481CF1F26BC4481276B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	rundll32.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 3024 wrote to memory of 4136	3024	rundll32.exe	81

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Plugins\Steamless.Unpacker.Variant31.x86.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3024
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\Plugins\Steamless.Unpacker.Variant31.x86.dll,#1
  2⤵
  - System Location Discovery: System Language Discovery
  PID:4136

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads