7d2590bbe18a10c329b7558e5f862d27867596493104d69796067b4e755d22fd

Resubmissions

02/07/2026, 17:07

260702-vm2khsav4t8

02/07/2026, 16:29

260702-ty9vlaex9n8

01/07/2026, 16:23

260701-tvy9pabx4w8

Analysis

max time kernel
150s
max time network
135s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/07/2026, 17:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ComIntRep v11.1.3/ComIntRep.exe
Size 2.1MB
Sample260702-vm2khsav4t
SHA256 7d2590bbe18a10c329b7558e5f862d27867596493104d69796067b4e755d22fd
MD5 212479e9cdb1b665c43d46ad3abe14a3
SHA1 c54123d2505e59bf7dd5e80274316864164b7952
SHA512 536a556b8d7c53e2c12e63a69ff13c34af75f8bcc3fbb6ea11d262d18279fefb0b9c6a6beb48074714c4538d04aa03434303eff5dcbb4d973d7e4ac0b59b2200
SSDEEP 49152:CTvC/MTQYxsWR7a2E/RsFKqyxfWjKPUnrGOhU+PCGT8ECh2L0b:CjTQYxsWRMRsTyxfEir+KGeh2o
TLSH
T150A5D18377409126FE6681339BD7D931067DBE2D5823A6CF23E83E7BBDB1161052E612
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ComIntRep.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3848	ComIntRep_X64.exe
3848	ComIntRep_X64.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3848	ComIntRep_X64.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	4584	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	4584	AUDIODG.EXE

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 2300 wrote to memory of 3848	2300	ComIntRep.exe	88

C:\Users\Admin\AppData\Local\Temp\ComIntRep v11.1.3\ComIntRep.exe
"C:\Users\Admin\AppData\Local\Temp\ComIntRep v11.1.3\ComIntRep.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2300
- C:\Users\Admin\AppData\Local\Temp\ComIntRep v11.1.3\ComIntRep_X64.exe
  "C:\Users\Admin\AppData\Local\Temp\ComIntRep v11.1.3\ComIntRep_X64.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: GetForegroundWindowSpam
  PID:3848

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004F8 0x00000000000004FC
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4584

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

ComIntRep.ini

Path C:\Users\Admin\AppData\Local\Temp\ComIntRep v11.1.3\ComIntRep.ini
Size 318B
SHA256 cdb3c3ba28e7190389c832db210bcb0f5093d786dfcd31957e2e7ec818e5fa32
MD5 efb26a5b528f5b9e7a63ecb4c43b6431
SHA1 fd492902a965018afd18e6051cc17bea20e4a6c5
SHA512 bebd99e79294594d57d598fc1459563e484ba438b7367fb0253e2511c8244e7f0f5d44984f0b1938d4f83039ff3e78c5bcae53836e4028dbd81511cd1cc35ca5
TLSH
T101E07D8140A8521C2689C2F74DF1CBD168FC84076C2FAA211427FCC5DE98611B33F1A5
MD5 SHA1 SHA512 TLSH

Submit Download

ComIntRep.log

Path C:\Users\Admin\AppData\Local\Temp\ComIntRep v11.1.3\Logging\ComIntRep\ComIntRep.log
Size 4KB
SHA256 04560e32d4b3319e7aece18a6bef75d161e5695edf9db7a05a8f787e55fed05a
MD5 4147c90300b75afe24a7475de607ed1c
SHA1 eeb3cfc2c41519a63de4de678cc0950f569c7717
SHA512 5b18f9f3df2099615b2c9a0cf96d66b3121615334c928eebd722ac19157753ae91b97af8d164b75772920433c00e82bcca495e7a853d4eef565ca332c23452ee
SSDEEP 96:x5sQ0rztlQeiuflwIJR60iAukeIQ1JOdIJYmJoyYicQJNOpIJUyN2W9IRV:/z0rztae1lwAR60vukeF1EdAYmqyYip6
TLSH
T1C3915B51AE8393DA0324DA840749D60BD991070A2297A47A33FED7D01F01F19DBAFDDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download