Overview

overview

7

Static

static

3

FNiA 3D CE 1.0.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    914s
  • max time network
    500s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260706-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    08/07/2026, 02:51

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    FNiA 3D CE 1.0.exe
  • Size 900.2MB
  • Sample260708-db99vahz21
  • SHA256 30d11da70dc0450d47a7ac4729884eeaa3c02b53b96bf6cf2a67ba387c800d1b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discovery

Malware Config

Signatures

  • Loads dropped DLL 13 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies registry class 9 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\FNiA 3D CE 1.0.exe
    "C:\Users\Admin\AppData\Local\Temp\FNiA 3D CE 1.0.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:2436
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k GPSvcGroup
    1⤵
      PID:2568
    • C:\Windows\System32\SecurityHealthHost.exe
      \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
      1⤵
        PID:2032

      Network

            MITRE ATT&CK Enterprise v16

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            DRPC.mfx
            • Path C:\Users\Admin\AppData\Local\Temp\1cc0486b-9ecf-4027-be39-0b5a42574519.FusionApp\DRPC.mfx
            • Size 865KB
            • SHA256 48d5e7246d3e0b2e1da65f5307a1c920e56d372cb2fb112db70ce51d87afeceb
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Easing.mfx
            • Path C:\Users\Admin\AppData\Local\Temp\1cc0486b-9ecf-4027-be39-0b5a42574519.FusionApp\Easing.mfx
            • Size 168KB
            • SHA256 1b5e79e999c4cff19fe0260bdeaeeaea0fcda6057bf6d17bf0f121e9797d20ef
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Perspective.mfx
            • Path C:\Users\Admin\AppData\Local\Temp\1cc0486b-9ecf-4027-be39-0b5a42574519.FusionApp\Perspective.mfx
            • Size 15KB
            • SHA256 090925a4cd961f22b1ecd2fba4ce04ab063e26507a1dc09b1d6a40c4860a8777
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            cctrans.dll
            • Path C:\Users\Admin\AppData\Local\Temp\1cc0486b-9ecf-4027-be39-0b5a42574519.FusionApp\cctrans.dll
            • Size 141KB
            • SHA256 55e75e784e436cccd978192fba869656f879f0f126e99b375c3849c99872ec56
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            mmf2d3d11.dll
            • Path C:\Users\Admin\AppData\Local\Temp\1cc0486b-9ecf-4027-be39-0b5a42574519.FusionApp\mmf2d3d11.dll
            • Size 547KB
            • SHA256 95374f7a8baf4aa4851a6cab31f04cb2450cec3837dacfdc9456e37b0b6c1496
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            mmf2d3d9.dll
            • Path C:\Users\Admin\AppData\Local\Temp\1cc0486b-9ecf-4027-be39-0b5a42574519.FusionApp\mmf2d3d9.dll
            • Size 1.1MB
            • SHA256 3cde7a9181ab63a42cd3535d279d0ab1397b7b78fa3ddddef832757ab2024101
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            mmfs2.dll
            • Path C:\Users\Admin\AppData\Local\Temp\1cc0486b-9ecf-4027-be39-0b5a42574519.FusionApp\mmfs2.dll
            • Size 509KB
            • SHA256 3a288448e88a296b2bceeaf093e76a22e3083e937a3c4efeb6a61565ca7e35df
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            mp3flt.sft
            • Path C:\Users\Admin\AppData\Local\Temp\1cc0486b-9ecf-4027-be39-0b5a42574519.FusionApp\mp3flt.sft
            • Size 24KB
            • SHA256 ddeafda7b28bf7545e3ba164aa4a74219eb961c36bb974e0f5085a07daf18f44
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            waveflt.sft
            • Path C:\Users\Admin\AppData\Local\Temp\1cc0486b-9ecf-4027-be39-0b5a42574519.FusionApp\waveflt.sft
            • Size 8KB
            • SHA256 92a5053cf5973a6aa228c738d55387f12f1dfa8a837d7b938c60f05b6b56b3ad
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            memory/2436-22-0x0000000001810000-0x0000000001840000-memory.dmp
            Download