d389382fc33b4dba1220c1f0686016c1c998221f8a141bae0f697263067a0e28

Analysis

max time kernel
148s
max time network
114s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
17/07/2026, 18:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
FZC.exe
Size 53KB
Sample260717-w33m7aex2x
SHA256 d389382fc33b4dba1220c1f0686016c1c998221f8a141bae0f697263067a0e28
MD5 6610d6bcbf280bd98624a930e9fc8698
SHA1 f4bc0347487d9a09b48b1f5459810cc6266d838b
SHA512 b97b451879e2790b71eed3f5ab058a52f0e6122f465ed04e78dc8f953afde957f9327d144e50d7b90bee6765dbabc8cf6dbd1c5b9a9671471c718e75499a5a24
SSDEEP 1536:g1aUxS6toF21MuSk4fMZ8sxnjBhCx3GwMRpKlRuj:BgBtu21Mtk409pjBIxWDK/uj
TLSH
T12533F1447D630E60DB5BCB36A3FC085530C24A8F88DBB4178E766AEBD170721DB9744A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/2716-0-0x0000000000400000-0x000000000044E0E5-memory.dmp	upx
behavioral2/memory/2716-1-0x0000000000400000-0x000000000044E0E5-memory.dmp	upx

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	FZC.exe

C:\Users\Admin\AppData\Local\Temp\FZC.exe
"C:\Users\Admin\AppData\Local\Temp\FZC.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:2716

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2716-0-0x0000000000400000-0x000000000044E0E5-memory.dmp

Download

memory/2716-1-0x0000000000400000-0x000000000044E0E5-memory.dmp