Analysis
- max time kernel
148s - max time network
143s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260706-en - resource tags
- submitted
07/07/2026, 14:26
General
- Target cb1e2e0a39958b419b291c5462be9e346f36d051833d37b748718122e5f1f497.exe
- Size 1.4MB
- Sample260707-rr33csf14n
- SHA256 cb1e2e0a39958b419b291c5462be9e346f36d051833d37b748718122e5f1f497
Malware Config
Signatures
- .NET Reactor proctector 1 IoCs
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\cb1e2e0a39958b419b291c5462be9e346f36d051833d37b748718122e5f1f497.exe"C:\Users\Admin\AppData\Local\Temp\cb1e2e0a39958b419b291c5462be9e346f36d051833d37b748718122e5f1f497.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1968-0-0x0000000074812000-0x0000000074813000-memory.dmp
memory/1968-1-0x0000000000830000-0x0000000000998000-memory.dmp
memory/1968-2-0x0000000005970000-0x0000000005F2A000-memory.dmp
memory/1968-3-0x00000000054B0000-0x0000000005542000-memory.dmp
memory/1968-4-0x00000000055F0000-0x000000000568C000-memory.dmp
memory/1968-5-0x0000000005570000-0x000000000557A000-memory.dmp
memory/1968-6-0x0000000074800000-0x0000000074FBC000-memory.dmp
memory/1968-7-0x0000000005690000-0x00000000056F0000-memory.dmp
memory/1968-8-0x0000000074800000-0x0000000074FBC000-memory.dmp