Overview

overview

4

Static

static

3

setup.exe

windows10-2004-x64

4

Analysis

  • user interaction
    yes
  • max time kernel
    58s
  • max time network
    61s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    13/07/2026, 02:24

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    setup.exe
  • Size 5.9MB
  • Sample260713-cvscpsds91
  • SHA256 c53a13e3d5a68beea4f69465913df2f0961644138c8c71c7992f96c3b80f5262
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
discovery

Malware Config

Signatures

  • Drops file in Program Files directory 3 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\setup.exe
    "C:\Users\Admin\AppData\Local\Temp\setup.exe"
    1⤵
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4524
    • C:\Users\Admin\AppData\Local\Temp\setup.exe
      C:\Users\Admin\AppData\Local\Temp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files (x86)\Crashpad" --annotation=plat=Win32 --annotation=prod=OneBrowser --annotation=ver=137.0.7151.69 --initial-client-data=0x758,0x75c,0x760,0x738,0x764,0xf62b40,0xf62b4c,0xf62b58
      2⤵
      • System Location Discovery: System Language Discovery
      PID:2908
  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
    1⤵
      PID:4108
    • C:\Users\Admin\AppData\Local\Temp\setup.exe
      "C:\Users\Admin\AppData\Local\Temp\setup.exe"
      1⤵
      • System Location Discovery: System Language Discovery
      PID:1864

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          8B2B9A00839EED1DFDCCC3BFC2F5DF12
          • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12
          • Size 1KB
          • SHA256 63b14543360f5e89942ea8d5113526e64fbc71c1207328f0136b3a495d921dd0
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          B46811C17859FFB409CF0E904A4AA8F8
          • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8
          • Size 528B
          • SHA256 d2bb091268ade68ad8121d2184d0fbce128070156304bd4de312e6fbd267409c
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          BE53AF98522FD115625E0F1A9FBFB39F
          • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BE53AF98522FD115625E0F1A9FBFB39F
          • Size 490B
          • SHA256 c671e19463584355876bbf96c97d2f78e80675f481e11027ecfcd235107d5fae
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          8B2B9A00839EED1DFDCCC3BFC2F5DF12
          • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12
          • Size 174B
          • SHA256 580b0c100428259d642cb545560dafa295f2c40cd6d52e10da73652bfbff1b3b
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          B46811C17859FFB409CF0E904A4AA8F8
          • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8
          • Size 170B
          • SHA256 151737c1d3d6f7165cf0b6d68c673c0a3bf5443fd018f3a0fa5cffa8a63defbc
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          BE53AF98522FD115625E0F1A9FBFB39F
          • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\BE53AF98522FD115625E0F1A9FBFB39F
          • Size 192B
          • SHA256 11e4eecb299a9d5f668a8a4e64b6565b5ef4e4a2acecef5dece9435bf0630ba9
          • MD5 SHA1 SHA512 TLSH
          Submit Download