Resubmissions
21/07/2026, 17:38
260721-v7shcayyas713/07/2026, 17:10
260713-vp51qaev21713/07/2026, 05:48
260713-ghw8cact3q7Analysis
- max time kernel
300s - max time network
304s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
13/07/2026, 17:10
General
- Target Setup.exe
- Size 94KB
- Sample260713-vp51qaev21
- SHA256 8c1b9b8e72264e27253a7cc14d6f9a560a127ebd9f8bcec81faba94710c19a47
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
- Program crash 1 IoCs
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Setup.exe"C:\Users\Admin\AppData\Local\Temp\Setup.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2624 -s 7082⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 2624 -ip 26241⤵
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2624-0-0x0000000000F00000-0x0000000000F2F000-memory.dmp
memory/2624-1-0x000000007F9F0000-0x000000007F9F1000-memory.dmp
memory/2624-15-0x000000007F9F0000-0x000000007F9F1000-memory.dmp
memory/2624-11-0x000000007F9F0000-0x000000007F9F1000-memory.dmp
memory/2624-9-0x000000007F9F0000-0x000000007F9F1000-memory.dmp
memory/2624-7-0x000000007F9F0000-0x000000007F9F1000-memory.dmp
memory/2624-6-0x000000007F9F0000-0x000000007F9F1000-memory.dmp
memory/2624-4-0x000000007F9F0000-0x000000007F9F1000-memory.dmp
memory/2624-23-0x000000007F9F0000-0x000000007F9F1000-memory.dmp
memory/2624-941-0x0000000077A58000-0x0000000077A59000-memory.dmp
memory/2624-971-0x000000007FB90000-0x000000007FB95000-memory.dmp
memory/2624-991-0x0000000002AA0000-0x0000000002AA1000-memory.dmp
memory/2624-987-0x0000000002A80000-0x0000000002A81000-memory.dmp
memory/2624-999-0x0000000002FD0000-0x0000000002FD1000-memory.dmp
memory/2624-1017-0x0000000003060000-0x0000000003061000-memory.dmp
memory/2624-1030-0x00000000030D0000-0x00000000030D1000-memory.dmp
memory/2624-1029-0x00000000030C0000-0x00000000030C1000-memory.dmp
memory/2624-1028-0x00000000030C0000-0x00000000030C1000-memory.dmp
memory/2624-1027-0x00000000030B0000-0x00000000030B1000-memory.dmp
memory/2624-1026-0x00000000030B0000-0x00000000030B1000-memory.dmp
memory/2624-1025-0x00000000030A0000-0x00000000030A1000-memory.dmp
memory/2624-1085-0x0000000000F00000-0x0000000000F2F000-memory.dmp
memory/2624-1024-0x00000000030A0000-0x00000000030A1000-memory.dmp
memory/2624-1023-0x0000000003090000-0x0000000003091000-memory.dmp
memory/2624-1022-0x0000000003090000-0x0000000003091000-memory.dmp
memory/2624-1021-0x0000000003080000-0x0000000003081000-memory.dmp
memory/2624-1020-0x0000000003080000-0x0000000003081000-memory.dmp
memory/2624-1019-0x0000000003070000-0x0000000003071000-memory.dmp
memory/2624-1018-0x0000000003070000-0x0000000003071000-memory.dmp
memory/2624-1015-0x0000000003050000-0x0000000003051000-memory.dmp
memory/2624-1014-0x0000000003050000-0x0000000003051000-memory.dmp
memory/2624-1013-0x0000000003040000-0x0000000003041000-memory.dmp
memory/2624-1012-0x0000000003040000-0x0000000003041000-memory.dmp
memory/2624-1011-0x0000000003030000-0x0000000003031000-memory.dmp
memory/2624-1010-0x0000000003030000-0x0000000003031000-memory.dmp
memory/2624-1112-0x0000000000F00000-0x0000000000F2F000-memory.dmp
memory/2624-1002-0x0000000002FF0000-0x0000000002FF1000-memory.dmp
memory/2624-1206-0x0000000000F00000-0x0000000000F2F000-memory.dmp
memory/2624-1230-0x0000000000F00000-0x0000000000F2F000-memory.dmp
memory/2624-1007-0x0000000003010000-0x0000000003011000-memory.dmp
memory/2624-1265-0x0000000000F00000-0x0000000000F2F000-memory.dmp
memory/2624-1006-0x0000000003010000-0x0000000003011000-memory.dmp
memory/2624-1005-0x0000000003000000-0x0000000003001000-memory.dmp
memory/2624-1004-0x0000000003000000-0x0000000003001000-memory.dmp
memory/2624-998-0x0000000002FD0000-0x0000000002FD1000-memory.dmp
memory/2624-1001-0x0000000002FE0000-0x0000000002FE1000-memory.dmp
memory/2624-1000-0x0000000002FE0000-0x0000000002FE1000-memory.dmp
memory/2624-997-0x0000000002AD0000-0x0000000002AD1000-memory.dmp
memory/2624-996-0x0000000002AD0000-0x0000000002AD1000-memory.dmp
memory/2624-995-0x0000000002AC0000-0x0000000002AC1000-memory.dmp
memory/2624-994-0x0000000002AC0000-0x0000000002AC1000-memory.dmp
memory/2624-993-0x0000000002AB0000-0x0000000002AB1000-memory.dmp
memory/2624-992-0x0000000002AB0000-0x0000000002AB1000-memory.dmp
memory/2624-989-0x0000000002A90000-0x0000000002A91000-memory.dmp
memory/2624-1372-0x0000000000F00000-0x0000000000F2F000-memory.dmp
memory/2624-990-0x0000000002AA0000-0x0000000002AA1000-memory.dmp
memory/2624-988-0x0000000002A90000-0x0000000002A91000-memory.dmp
memory/2624-986-0x0000000002A80000-0x0000000002A81000-memory.dmp
memory/2624-1593-0x0000000000F00000-0x0000000000F2F000-memory.dmp
memory/2624-1701-0x0000000000F00000-0x0000000000F2F000-memory.dmp
memory/2624-985-0x0000000002A70000-0x0000000002A71000-memory.dmp
memory/2624-1912-0x0000000000F00000-0x0000000000F2F000-memory.dmp
memory/2624-2079-0x0000000000F00000-0x0000000000F2F000-memory.dmp
memory/2624-1903-0x0000000000F00000-0x0000000000F2F000-memory.dmp
memory/2624-1897-0x0000000000F00000-0x0000000000F2F000-memory.dmp
memory/2624-1016-0x0000000003060000-0x0000000003061000-memory.dmp
memory/2624-1009-0x0000000003020000-0x0000000003021000-memory.dmp
memory/2624-1008-0x0000000003020000-0x0000000003021000-memory.dmp
memory/2624-1003-0x0000000002FF0000-0x0000000002FF1000-memory.dmp
memory/2624-984-0x0000000002A70000-0x0000000002A71000-memory.dmp
memory/2624-983-0x0000000002A50000-0x0000000002A51000-memory.dmp
memory/2624-982-0x0000000002A50000-0x0000000002A51000-memory.dmp
memory/2624-981-0x0000000002A40000-0x0000000002A41000-memory.dmp
memory/2624-980-0x0000000002A40000-0x0000000002A41000-memory.dmp
memory/2624-979-0x0000000002A30000-0x0000000002A31000-memory.dmp
memory/2624-978-0x0000000002A30000-0x0000000002A31000-memory.dmp
memory/2624-977-0x0000000002A20000-0x0000000002A21000-memory.dmp
memory/2624-976-0x0000000002A20000-0x0000000002A21000-memory.dmp
memory/2624-3209-0x0000000000F00000-0x0000000000F2F000-memory.dmp
memory/2624-3694-0x0000000000F00000-0x0000000000F2F000-memory.dmp
memory/2624-3693-0x0000000000F00000-0x0000000000F2F000-memory.dmp