39037fcd5d12cb0037e5743c7e9905954d0af1517b28e37d75af51dbbc1082a0

Login
Reports

Overview

overview

Static

static

Minecraft....io.exe

windows10-ltsc_2021-x64

Data/Pytho...y3.pyc

windows10-ltsc_2021-x64

Data/Pytho...ig.pyc

windows10-ltsc_2021-x64

Data/Pytho...ke.pyc

windows10-ltsc_2021-x64

Data/Pytho...cs.pyc

windows10-ltsc_2021-x64

Data/Pytho...rs.pyc

windows10-ltsc_2021-x64

Data/Pytho...as.pyc

windows10-ltsc_2021-x64

Data/Pytho...le.pyc

windows10-ltsc_2021-x64

Data/Pytho...me.pyc

windows10-ltsc_2021-x64

Data/Pytho...ng.pyc

windows10-ltsc_2021-x64

Data/Pytho...on.pyc

windows10-ltsc_2021-x64

Data/Pytho...ort.py

windows10-ltsc_2021-x64

Data/audio.dll

windows10-ltsc_2021-x64

Data/file.dll

windows10-ltsc_2021-x64

Data/gmbinaryfile.dll

windows10-ltsc_2021-x64

Data/midiinput.dll

windows10-ltsc_2021-x64

Data/move.bat

windows10-ltsc_2021-x64

Data/wallpaper.bat

windows10-ltsc_2021-x64

Data/window.dll

windows10-ltsc_2021-x64

DialogModule.dll

windows10-ltsc_2021-x64

ExecuteShell.dll

windows10-ltsc_2021-x64

FileDropper.dll

windows10-ltsc_2021-x64

Launch Debug.bat

windows10-ltsc_2021-x64

Minecraft ...io.exe

windows10-ltsc_2021-x64

NBS Player Mode.bat

windows10-ltsc_2021-x64

NekoPresence.dll

windows10-ltsc_2021-x64

ffmpeg.exe

windows10-ltsc_2021-x64

ffprobe.exe

windows10-ltsc_2021-x64

pygml.dll

windows10-ltsc_2021-x64

python38.dll

windows10-ltsc_2021-x64

uninstall.exe

windows10-ltsc_2021-x64

window_set_icon.dll

windows10-ltsc_2021-x64

Analysis

max time kernel
149s
max time network
141s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
05/07/2026, 12:36

Sharing

Copy URL Twitter E-mail

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Minecraft.Note.Block.Studio.exe

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

16 signatures

150 seconds

Behavioral task

behavioral2

Sample

Data/Python/Lib/site-packages/numpy/typing/tests/data/pass/simple_py3.pyc

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

4 signatures

150 seconds

discovery

Behavioral task

behavioral3

Sample

Data/Python/Lib/site-packages/numpy/typing/tests/data/pass/ufunc_config.pyc

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

4 signatures

150 seconds

discovery

Behavioral task

behavioral4

Sample

Data/Python/Lib/site-packages/numpy/typing/tests/data/pass/ufunclike.pyc

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

4 signatures

150 seconds

discovery

Behavioral task

behavioral5

Sample

Data/Python/Lib/site-packages/numpy/typing/tests/data/pass/ufuncs.pyc

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

4 signatures

150 seconds

discovery

Behavioral task

behavioral6

Sample

Data/Python/Lib/site-packages/numpy/typing/tests/data/pass/warnings_and_errors.pyc

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

4 signatures

150 seconds

discovery

Behavioral task

behavioral7

Sample

Data/Python/Lib/site-packages/numpy/typing/tests/test_generic_alias.pyc

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

4 signatures

150 seconds

discovery

Behavioral task

behavioral8

Sample

Data/Python/Lib/site-packages/numpy/typing/tests/test_isfile.pyc

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

4 signatures

150 seconds

discovery

Behavioral task

behavioral9

Sample

Data/Python/Lib/site-packages/numpy/typing/tests/test_runtime.pyc

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

4 signatures

150 seconds

discovery

Behavioral task

behavioral10

Sample

Data/Python/Lib/site-packages/numpy/typing/tests/test_typing.pyc

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

4 signatures

150 seconds

discovery

Behavioral task

behavioral11

Sample

Data/Python/Lib/site-packages/numpy/version.pyc

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

Data/Python/audio_export.py

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

Data/audio.dll

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral14

Sample

Data/file.dll

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral15

Sample

Data/gmbinaryfile.dll

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

2 signatures

150 seconds

discovery

Behavioral task

behavioral16

Sample

Data/midiinput.dll

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

2 signatures

150 seconds

discovery

Behavioral task

behavioral17

Sample

Data/move.bat

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

Data/wallpaper.bat

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Data/window.dll

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral20

Sample

DialogModule.dll

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

2 signatures

150 seconds

discovery

Behavioral task

behavioral21

Sample

ExecuteShell.dll

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral22

Sample

FileDropper.dll

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

2 signatures

150 seconds

discovery

Behavioral task

behavioral23

Sample

Launch Debug.bat

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

5 signatures

150 seconds

discovery

Behavioral task

behavioral24

Sample

Minecraft Note Block Studio.exe

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

7 signatures

150 seconds

discovery

Behavioral task

behavioral25

Sample

NBS Player Mode.bat

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

5 signatures

150 seconds

discovery

Behavioral task

behavioral26

Sample

NekoPresence.dll

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

2 signatures

150 seconds

discovery

Behavioral task

behavioral27

Sample

ffmpeg.exe

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

1 signatures

150 seconds

discovery

Behavioral task

behavioral28

Sample

ffprobe.exe

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

1 signatures

150 seconds

discovery

Behavioral task

behavioral29

Sample

pygml.dll

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral30

Sample

python38.dll

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

3 signatures

150 seconds

discovery

Behavioral task

behavioral31

Sample

uninstall.exe

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

5 signatures

150 seconds

discovery

Behavioral task

behavioral32

Sample

window_set_icon.dll

Resource

win10ltsc2021-20260513-en

windows10-ltsc_2021-x64

2 signatures

150 seconds

discovery

Report Analysis Logs

General

Target
ffprobe.exe
Size 2.3MB
Sample260705-psxwmacv7s
SHA256 39037fcd5d12cb0037e5743c7e9905954d0af1517b28e37d75af51dbbc1082a0
MD5 9f8cefcafdef38c4e81240e52fcd3a3d
SHA1 441742f03401f4846cd00fdb4a360083d59cf233
SHA512 7fec60bd9bb12eb39b4238ec184f0493ab2e850160ebe0caed82a01e611ff4072fb8af0c781b2a6ea1696ced32b4df66a123dd9338a8d9ad1882fda0141d6ac6
SSDEEP 49152:vFJXu4G4MCd5KgepmfCHLybvfdS1ynY1wg4dm:vXXu4BMCd5nepiCHGbvfdS1ynYn4d
TLSH
T1ACB57C41EBC7A0F1EC1709706257FBBF9A346B068420DE7AFE986A48FF73E51151A214
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ffprobe.exe

Processes

C:\Users\Admin\AppData\Local\Temp\ffprobe.exe
"C:\Users\Admin\AppData\Local\Temp\ffprobe.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:752

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/752-0-0x00000000004A0000-0x000000000081F000-memory.dmp

Download