Analysis

  • max time kernel
    162s
  • max time network
    187s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260630-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260630-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    03/07/2026, 12:18

General

  • Target
    NoLimits_2.5.7.1_Install.exe
  • Size 991.7MB
  • Sample260703-pg4j2agz2s
  • SHA256 d97f5ac0ae7f38033661a1d4b07eb24bea9773e90c47dde0a9d0923066bcd135
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\NoLimits_2.5.7.1_Install.exe
    "C:\Users\Admin\AppData\Local\Temp\NoLimits_2.5.7.1_Install.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    PID:5848

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        InstallOptions.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsq44B1.tmp\InstallOptions.dll
        • Size 14KB
        • SHA256 8f24c6cf0b06d18f3c07e7bfca4e92afce71834663746cfaa9ddf52a25d5c586
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsq44B1.tmp\System.dll
        • Size 10KB
        • SHA256 bb6df93369b498eaa638b0bcdc4bb89f45e9b02ca12d28bcedf4629ea7f5e0f1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ioSpecial.ini

        • Path C:\Users\Admin\AppData\Local\Temp\nsq44B1.tmp\ioSpecial.ini
        • Size 712B
        • SHA256 81dc8395281544cc1324d6403d6957ae3b6c53b83c5ba7a3401c62516041a8b6
        • MD5 SHA1 SHA512 TLSH