Analysis
- max time kernel
152s - max time network
172s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
11/07/2026, 06:38
General
- Target MAGIX Vegas 20.0.411.exe
- Size 290.4MB
- Sample260711-heaqlsds3p
- SHA256 c65c0d2f9ef496d1f551f9f36e2e3ff14af71cac6b0e46fcfacb9dcdecc453a2
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Loads dropped DLL 4 IoCs
- System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Inno Setup is an open-source installation builder for Windows applications. 2 IoCs
Inno Setup installer
- Suspicious behavior: EnumeratesProcesses 40 IoCs
- Suspicious use of SetWindowsHookEx 3 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\MAGIX Vegas 20.0.411.exe"C:\Users\Admin\AppData\Local\Temp\MAGIX Vegas 20.0.411.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\is-SFSQM.tmp\MAGIX Vegas 20.0.411.tmp"C:\Users\Admin\AppData\Local\Temp\is-SFSQM.tmp\MAGIX Vegas 20.0.411.tmp" /SL5="$501AC,304104975,64512,C:\Users\Admin\AppData\Local\Temp\MAGIX Vegas 20.0.411.exe"2⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
ISTask.dll
VclStylesInno.dll
MAGIX Vegas 20.0.411.tmp
memory/2736-0-0x0000000000400000-0x0000000000417000-memory.dmp
memory/2736-99-0x0000000000400000-0x0000000000417000-memory.dmp
memory/3896-6-0x0000000002440000-0x0000000002441000-memory.dmp
memory/3896-17-0x0000000007D00000-0x0000000007D16000-memory.dmp
memory/3896-28-0x00000000083B0000-0x00000000083B1000-memory.dmp
memory/3896-30-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-36-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-41-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-40-0x00000000083F0000-0x00000000083F1000-memory.dmp
memory/3896-39-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-38-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-35-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-37-0x00000000083E0000-0x00000000083E1000-memory.dmp
memory/3896-32-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-29-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-27-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-34-0x00000000083D0000-0x00000000083D1000-memory.dmp
memory/3896-26-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-33-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-31-0x00000000083C0000-0x00000000083C1000-memory.dmp
memory/3896-25-0x00000000083A0000-0x00000000083A1000-memory.dmp
memory/3896-23-0x0000000007F30000-0x000000000824A000-memory.dmp
memory/3896-42-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-43-0x0000000008400000-0x0000000008401000-memory.dmp
memory/3896-45-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-51-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-87-0x00000000080CE000-0x00000000080CF000-memory.dmp
memory/3896-78-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-84-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-83-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-81-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-80-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-77-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-75-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-74-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-72-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-71-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-82-0x00000000084D0000-0x00000000084D1000-memory.dmp
memory/3896-69-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-68-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-66-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-65-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-63-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-62-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-79-0x00000000084C0000-0x00000000084C1000-memory.dmp
memory/3896-60-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-59-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-57-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-56-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-67-0x0000000008480000-0x0000000008481000-memory.dmp
memory/3896-64-0x0000000008470000-0x0000000008471000-memory.dmp
memory/3896-61-0x0000000008460000-0x0000000008461000-memory.dmp
memory/3896-58-0x0000000008450000-0x0000000008451000-memory.dmp
memory/3896-55-0x0000000008440000-0x0000000008441000-memory.dmp
memory/3896-54-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-53-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-76-0x00000000084B0000-0x00000000084B1000-memory.dmp
memory/3896-73-0x00000000084A0000-0x00000000084A1000-memory.dmp
memory/3896-70-0x0000000008490000-0x0000000008491000-memory.dmp
memory/3896-52-0x0000000008430000-0x0000000008431000-memory.dmp
memory/3896-48-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-47-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-44-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-50-0x0000000008250000-0x0000000008390000-memory.dmp
memory/3896-49-0x0000000008420000-0x0000000008421000-memory.dmp
memory/3896-46-0x0000000008410000-0x0000000008411000-memory.dmp
memory/3896-88-0x0000000007F30000-0x000000000824A000-memory.dmp
memory/3896-89-0x0000000007F30000-0x000000000824A000-memory.dmp
memory/3896-91-0x0000000007F30000-0x000000000824A000-memory.dmp
memory/3896-90-0x0000000007F30000-0x000000000824A000-memory.dmp
memory/3896-92-0x0000000007F30000-0x000000000824A000-memory.dmp
memory/3896-94-0x0000000007F30000-0x000000000824A000-memory.dmp
memory/3896-93-0x0000000007F30000-0x000000000824A000-memory.dmp
memory/3896-95-0x0000000007F30000-0x000000000824A000-memory.dmp
memory/3896-98-0x0000000002440000-0x0000000002441000-memory.dmp
memory/3896-103-0x0000000007F30000-0x000000000824A000-memory.dmp