a90f2124e3be40a0127a023fcc5423bc0981ab2131ab03fd807a76bc16a897da

Analysis

max time kernel
148s
max time network
117s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/07/2026, 12:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Internet Maniac/Internet Maniac.exe
Size 97KB
Sample260718-pex98sev2z
SHA256 a90f2124e3be40a0127a023fcc5423bc0981ab2131ab03fd807a76bc16a897da
MD5 c825c62d3c699aaf5c173aebc115daba
SHA1 55d239a4bff281202845a9645ddb871259b37e2a
SHA512 7ea6d6f1e7145c51afc39f74614e668b04183b32f5afc32b86832aa21406d112a8eb991d3184936432212eebdb1d82dc585b61c3e60b252a1e8f65b1c35ba9cd
SSDEEP 1536:04jj2Enld2CEmaJ8AKedqitpjBBdojDMF4QSlxr5+nsQZ:hjj2Eld2CEmfp0PtpVDoPMLSlxr5+ns
TLSH
T198A33B60F5E081AAF07ED63124F5AF35AB39BC352B34869BAF34A57F5C325408E25712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SumitSoft.ini	Internet Maniac.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Internet Maniac.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
6856	Internet Maniac.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
6856	Internet Maniac.exe

C:\Users\Admin\AppData\Local\Temp\Internet Maniac\Internet Maniac.exe
"C:\Users\Admin\AppData\Local\Temp\Internet Maniac\Internet Maniac.exe"
1⤵
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:6856

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

SumitSoft.ini

Path C:\Windows\SumitSoft.ini
Size 84B
SHA256 bd541c13b380637bb97f2284cf2b6c822404c4911ddbd258da5b4fdf8270a4ca
MD5 ef626b0792f600d6c131b9a21c11ae0b
SHA1 e6bc239d3d45b43cdcc7f14e5a63955272a722f8
SHA512 5706e7552580c4db0878c43ea1600a6320766d6dd0549b721125ec5ac73a36cd9c2ef1b9d3211e513083b38e5923dd9471a2179ce5bdbaed08385fde5f2dc82c
TLSH
T198A012500344510863085142E259007168D81D124845241150EB1400763C4EA4644168
MD5 SHA1 SHA512 TLSH

Submit Download