Analysis
- max time kernel
148s - max time network
113s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
10/07/2026, 23:46
General
- Target fabric-installer-1.1.1 (4).exe
- Size 472KB
- Sample260710-3scscafv7q
- SHA256 488b5f4f1d5e422212c445978be256e2d1f7b96e882c750efc2a1c7e107de263
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of SetWindowsHookEx 2 IoCs
- Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fabric-installer-1.1.1 (4).exe"C:\Users\Admin\AppData\Local\Temp\fabric-installer-1.1.1 (4).exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe"javaw.exe" "-version"2⤵
-
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe"javaw.exe" "-jar" "C:\Users\Admin\AppData\Local\Temp\fabric-installer-1.1.1 (4).exe" "-fabricInstallerBootstrap" "true"2⤵
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
3903daac9bc4a3b7.timestamp
memory/1356-16-0x00000263D84A0000-0x00000263D8710000-memory.dmp
memory/1356-26-0x00000263D8400000-0x00000263D8401000-memory.dmp
memory/1356-30-0x00000263D8400000-0x00000263D8401000-memory.dmp
memory/1356-34-0x00000263D8710000-0x00000263D8720000-memory.dmp
memory/1356-36-0x00000263D8720000-0x00000263D8730000-memory.dmp
memory/1356-39-0x00000263D8730000-0x00000263D8740000-memory.dmp
memory/1356-40-0x00000263D8740000-0x00000263D8750000-memory.dmp
memory/1356-42-0x00000263D8750000-0x00000263D8760000-memory.dmp
memory/1356-44-0x00000263D8760000-0x00000263D8770000-memory.dmp
memory/1356-46-0x00000263D8770000-0x00000263D8780000-memory.dmp
memory/1356-48-0x00000263D8780000-0x00000263D8790000-memory.dmp
memory/1356-51-0x00000263D8790000-0x00000263D87A0000-memory.dmp
memory/1356-50-0x00000263D84A0000-0x00000263D8710000-memory.dmp
memory/1356-53-0x00000263D87A0000-0x00000263D87B0000-memory.dmp
memory/1356-57-0x00000263D87B0000-0x00000263D87C0000-memory.dmp
memory/1356-56-0x00000263D8710000-0x00000263D8720000-memory.dmp
memory/1356-62-0x00000263D87C0000-0x00000263D87D0000-memory.dmp
memory/1356-64-0x00000263D8730000-0x00000263D8740000-memory.dmp
memory/1356-66-0x00000263D87E0000-0x00000263D87F0000-memory.dmp
memory/1356-65-0x00000263D8740000-0x00000263D8750000-memory.dmp
memory/1356-69-0x00000263D87F0000-0x00000263D8800000-memory.dmp
memory/1356-68-0x00000263D8750000-0x00000263D8760000-memory.dmp
memory/1356-63-0x00000263D87D0000-0x00000263D87E0000-memory.dmp
memory/1356-60-0x00000263D8720000-0x00000263D8730000-memory.dmp
memory/1356-71-0x00000263D8760000-0x00000263D8770000-memory.dmp
memory/1356-72-0x00000263D8800000-0x00000263D8810000-memory.dmp
memory/1356-74-0x00000263D8770000-0x00000263D8780000-memory.dmp
memory/1356-75-0x00000263D8810000-0x00000263D8820000-memory.dmp
memory/1356-77-0x00000263D8780000-0x00000263D8790000-memory.dmp
memory/1356-78-0x00000263D8820000-0x00000263D8830000-memory.dmp
memory/1356-81-0x00000263D8830000-0x00000263D8840000-memory.dmp
memory/1356-80-0x00000263D8790000-0x00000263D87A0000-memory.dmp
memory/1356-84-0x00000263D8840000-0x00000263D8850000-memory.dmp
memory/1356-83-0x00000263D87A0000-0x00000263D87B0000-memory.dmp
memory/1356-88-0x00000263D8850000-0x00000263D8860000-memory.dmp
memory/1356-87-0x00000263D87B0000-0x00000263D87C0000-memory.dmp
memory/1356-90-0x00000263D87C0000-0x00000263D87D0000-memory.dmp
memory/1356-92-0x00000263D8860000-0x00000263D8870000-memory.dmp
memory/1356-94-0x00000263D8870000-0x00000263D8880000-memory.dmp
memory/1356-91-0x00000263D87D0000-0x00000263D87E0000-memory.dmp
memory/1356-98-0x00000263D87E0000-0x00000263D87F0000-memory.dmp
memory/1356-99-0x00000263D8880000-0x00000263D8890000-memory.dmp
memory/1356-104-0x00000263D8890000-0x00000263D88A0000-memory.dmp
memory/1356-103-0x00000263D87F0000-0x00000263D8800000-memory.dmp
memory/1356-107-0x00000263D88A0000-0x00000263D88B0000-memory.dmp
memory/1356-106-0x00000263D8800000-0x00000263D8810000-memory.dmp
memory/1356-110-0x00000263D88B0000-0x00000263D88C0000-memory.dmp
memory/1356-109-0x00000263D8810000-0x00000263D8820000-memory.dmp
memory/1356-112-0x00000263D8820000-0x00000263D8830000-memory.dmp
memory/1356-113-0x00000263D88C0000-0x00000263D88D0000-memory.dmp
memory/1356-116-0x00000263D88D0000-0x00000263D88E0000-memory.dmp
memory/1356-115-0x00000263D8830000-0x00000263D8840000-memory.dmp
memory/1356-119-0x00000263D8840000-0x00000263D8850000-memory.dmp
memory/1356-120-0x00000263D88E0000-0x00000263D88F0000-memory.dmp
memory/1356-122-0x00000263D8400000-0x00000263D8401000-memory.dmp
memory/1356-126-0x00000263D88F0000-0x00000263D8900000-memory.dmp
memory/1356-128-0x00000263D8900000-0x00000263D8910000-memory.dmp
memory/1356-127-0x00000263D8860000-0x00000263D8870000-memory.dmp
memory/1356-125-0x00000263D8850000-0x00000263D8860000-memory.dmp
memory/1356-133-0x00000263D8910000-0x00000263D8920000-memory.dmp
memory/1356-132-0x00000263D8870000-0x00000263D8880000-memory.dmp
memory/1356-135-0x00000263D8880000-0x00000263D8890000-memory.dmp
memory/1356-136-0x00000263D8920000-0x00000263D8930000-memory.dmp
memory/1356-137-0x00000263D8400000-0x00000263D8401000-memory.dmp
memory/1356-141-0x00000263D8930000-0x00000263D8940000-memory.dmp
memory/1356-140-0x00000263D8890000-0x00000263D88A0000-memory.dmp
memory/1356-145-0x00000263D88A0000-0x00000263D88B0000-memory.dmp
memory/1356-146-0x00000263D8960000-0x00000263D8970000-memory.dmp
memory/1356-147-0x00000263D88B0000-0x00000263D88C0000-memory.dmp
memory/1356-150-0x00000263D88C0000-0x00000263D88D0000-memory.dmp
memory/1356-151-0x00000263D8940000-0x00000263D8950000-memory.dmp
memory/1356-149-0x00000263D8950000-0x00000263D8960000-memory.dmp
memory/1356-153-0x00000263D8970000-0x00000263D8980000-memory.dmp
memory/1356-152-0x00000263D88D0000-0x00000263D88E0000-memory.dmp
memory/1356-156-0x00000263D88F0000-0x00000263D8900000-memory.dmp
memory/1356-157-0x00000263D8980000-0x00000263D8990000-memory.dmp
memory/1356-155-0x00000263D88E0000-0x00000263D88F0000-memory.dmp
memory/1356-161-0x00000263D8990000-0x00000263D89A0000-memory.dmp
memory/1356-163-0x00000263D8900000-0x00000263D8910000-memory.dmp
memory/1356-167-0x00000263D89B0000-0x00000263D89C0000-memory.dmp
memory/1356-166-0x00000263D8910000-0x00000263D8920000-memory.dmp
memory/1356-170-0x00000263D8920000-0x00000263D8930000-memory.dmp
memory/1356-173-0x00000263D8930000-0x00000263D8940000-memory.dmp
memory/1356-172-0x00000263D89D0000-0x00000263D89E0000-memory.dmp
memory/1356-171-0x00000263D89C0000-0x00000263D89D0000-memory.dmp
memory/1356-164-0x00000263D89A0000-0x00000263D89B0000-memory.dmp
memory/1356-177-0x00000263D89E0000-0x00000263D89F0000-memory.dmp
memory/1356-176-0x00000263D8950000-0x00000263D8960000-memory.dmp
memory/1356-175-0x00000263D8960000-0x00000263D8970000-memory.dmp
memory/1356-180-0x00000263D89F0000-0x00000263D8A00000-memory.dmp
memory/1356-182-0x00000263D8A00000-0x00000263D8A10000-memory.dmp
memory/1356-185-0x00000263D8400000-0x00000263D8401000-memory.dmp
memory/1356-191-0x00000263D8A10000-0x00000263D8A20000-memory.dmp
memory/1356-190-0x00000263D8970000-0x00000263D8980000-memory.dmp
memory/1356-198-0x00000263D8A20000-0x00000263D8A30000-memory.dmp
memory/1356-197-0x00000263D8980000-0x00000263D8990000-memory.dmp
memory/1356-200-0x00000263D8990000-0x00000263D89A0000-memory.dmp
memory/1356-201-0x00000263D89A0000-0x00000263D89B0000-memory.dmp
memory/1356-202-0x00000263D89B0000-0x00000263D89C0000-memory.dmp
memory/2812-2-0x0000028AD6170000-0x0000028AD63E0000-memory.dmp
memory/2812-12-0x0000028AD6040000-0x0000028AD6041000-memory.dmp
memory/2812-13-0x0000028AD6170000-0x0000028AD63E0000-memory.dmp