f934cfb725d75cf7511d723c265b3b08dc6e1ee8ecd24c077ba20faacbb8099d

Analysis

user interaction
yes
max time kernel
152s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260630-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260630-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/07/2026, 16:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
nox_setup_v7.0.0.8_full.exe
Size 431.6MB
Sample260706-tx8adadv3p
SHA256 f934cfb725d75cf7511d723c265b3b08dc6e1ee8ecd24c077ba20faacbb8099d
MD5 ee68ed864e8ef14502bf2c5f40fc4335
SHA1 52ee0d21a013613d098996ad720d81bd91b8b69d
SHA512 37ad17219d61f457cf7a00be07f7739c8afcae78e9db0995fe7e13b6f1dc0510ff6fcb21a52d0374184499c03f1c816b6eb43213b207a168e9e2cbd695c49814
SSDEEP 6291456:FVCxfffT7Yk6afhmvBX9NnY0HiAMjxJN8Ad/ZD65YG6c/PznwpjmptH2qgDHW3N:FVCN33t2tNnDHihjxJCAdBGyYPzwZYB3
TLSH
T1EC293353B295D57BE52144309AA2E7B4A2763D39073408C3F3D0B69B1E62CE2CA37779
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 2 IoCs

pid	Process
4128	nox_setup_v7.0.0.8_full.exe
4128	nox_setup_v7.0.0.8_full.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	nox_setup_v7.0.0.8_full.exe

C:\Users\Admin\AppData\Local\Temp\nox_setup_v7.0.0.8_full.exe
"C:\Users\Admin\AppData\Local\Temp\nox_setup_v7.0.0.8_full.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:4128

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

glut32.dll

Path C:\Users\Admin\AppData\Local\Nox\glut32.dll
Size 166KB
SHA256 4694318b8689911944e5ff75802146e516cf727d1a5d27c6988ecb90ce546748
MD5 6128ffddb31b9d812b151e613014a10f
SHA1 c95f0267c6a8fe92146ad28a2f00911c9aae9aa7
SHA512 e8a4a22db625866e5816558aac3f44c25c9b66259aa4377cb7559ea764e94ed48937b9a46c3eeeaa07f2680361ecf089fb56f155604e7ce314c8e4ef4b7de58c
SSDEEP 3072:6fcDNYy4UbIg5EN6ANQy4YsprbRVBkKkqVIx:0cDCHUkgA6ANB4Ys1RVPk
TLSH
T1CCF31B06FA3247ABC45A007C08BB3F347B7864D466B0524757B0FA5DADA339CED1267A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NOX41D3.tmp

Path C:\Users\Admin\AppData\Local\Temp\NOX41D3.tmp
Size 2KB
SHA256 870066ab3d2b58ffc6d9df7c97df10b1a447cdf37543bf57b204234d316d7c5e
MD5 fbf19bca76c83d805b0e89529c01f33a
SHA1 8561225773119afb35453d12a281c50f7965875a
SHA512 d9b053f95272b31de54ab10b182336870cc669e04a4a3960a5c320dd65cfb95b3405df110c44426e3adab35fc3985e4a091a49b93739a96e00627b7d2d39e71c
TLSH
T116414F2EEB49133226F103ABF10F58A0BB26149C432319DE949E5504330A26C17FF5E5
MD5 SHA1 SHA512 TLSH