Analysis

  • max time kernel
    151s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260710-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    19/07/2026, 16:10

General

  • Target
    AngryGoyII.exe
  • Size 47.9MB
  • Sample260719-tmd9jsd15m
  • SHA256 288d839aa1d272e080fbb52ff715ce71f22f795e46225f2794a44efa50e0a8c6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 30 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies registry class 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\AngryGoyII.exe
    "C:\Users\Admin\AppData\Local\Temp\AngryGoyII.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:2676

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        AdvDir.mfx

        • Path C:\Users\Admin\AppData\Local\Temp\mrtFE31.tmp\AdvDir.mfx
        • Size 12KB
        • SHA256 00c1bca2512b0d6278afd9bde4693348497238a233950621502962fd4b5df8ea
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ForEach.mfx

        • Path C:\Users\Admin\AppData\Local\Temp\mrtFE31.tmp\ForEach.mfx
        • Size 73KB
        • SHA256 2e3b169f989ce609b2dc4aa052343937badb1fbe41a702bf8327af9912d935b2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        KcArray.mfx

        • Path C:\Users\Admin\AppData\Local\Temp\mrtFE31.tmp\KcArray.mfx
        • Size 32KB
        • SHA256 16f507da7814a6105122cbc5a881ee558dafdcd0edc57dcdbce6798aa9dd68ec
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Layer.mfx

        • Path C:\Users\Admin\AppData\Local\Temp\mrtFE31.tmp\Layer.mfx
        • Size 122KB
        • SHA256 7da10d503a890cb3a9b653c5747717aba906bf26079f3038edd2b7177a59ed35
        • MD5 SHA1 SHA512 SSDEEP TLSH

        XBOXGamepad.mfx

        • Path C:\Users\Admin\AppData\Local\Temp\mrtFE31.tmp\XBOXGamepad.mfx
        • Size 64KB
        • SHA256 4c0b333a1e55721d40609134a76d3fdbc62485d0c20f7faf34e229054da18b96
        • MD5 SHA1 SHA512 SSDEEP TLSH

        adshow.mfx

        • Path C:\Users\Admin\AppData\Local\Temp\mrtFE31.tmp\adshow.mfx
        • Size 40KB
        • SHA256 c05b7b5fe45a20106ba776eec22dcbb606422edcae00942968cfd1f61046fc4c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aiffflt.sft

        • Path C:\Users\Admin\AppData\Local\Temp\mrtFE31.tmp\aiffflt.sft
        • Size 6KB
        • SHA256 5c00a02a5c0084a6681d34e97f8dacb80742c7e1ea1682a9d7efc9723e970dee
        • MD5 SHA1 SHA512 SSDEEP TLSH

        clickteam-movement-controller.mfx

        • Path C:\Users\Admin\AppData\Local\Temp\mrtFE31.tmp\clickteam-movement-controller.mfx
        • Size 34KB
        • SHA256 f42cf8a06f597308c9e5afe6aca52d229f769f5afa0162f87785fcc2a822efbf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        clickteam-vector.mvx

        • Path C:\Users\Admin\AppData\Local\Temp\mrtFE31.tmp\clickteam-vector.mvx
        • Size 32KB
        • SHA256 67a1ebbd388887326e40d0b097cc88d829a547079de8f6ff0af72abc97e0f57d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ctrlx.mfx

        • Path C:\Users\Admin\AppData\Local\Temp\mrtFE31.tmp\ctrlx.mfx
        • Size 44KB
        • SHA256 3407eb12f6bacec5ebd4df96ff3fd34741a3919fd46c2ec527364c5f1e753a65
        • MD5 SHA1 SHA512 SSDEEP TLSH

        kcfile.mfx

        • Path C:\Users\Admin\AppData\Local\Temp\mrtFE31.tmp\kcfile.mfx
        • Size 36KB
        • SHA256 daa25c6b2633009f655c0ea0503602ea220f9a5788e3ac7ca11c209be3246333
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mmf2d3d9.dll

        • Path C:\Users\Admin\AppData\Local\Temp\mrtFE31.tmp\mmf2d3d9.dll
        • Size 1.1MB
        • SHA256 a38d94169881d68a20c5031895492fa2bae58e70332b2f08fca79e62f4359edd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mmfs2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\mrtFE31.tmp\mmfs2.dll
        • Size 460KB
        • SHA256 3293a93c6d8a2ce529538fbdd2a81dc623fc40464efdb5348c8e039788ad1b22
        • MD5 SHA1 SHA512 SSDEEP TLSH

        modflt.sft

        • Path C:\Users\Admin\AppData\Local\Temp\mrtFE31.tmp\modflt.sft
        • Size 139KB
        • SHA256 e1744d0a36f01213f79a3db6e062f2d5ced5d78e7a4cd5770ec63669ffef2779
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mp3flt.sft

        • Path C:\Users\Admin\AppData\Local\Temp\mrtFE31.tmp\mp3flt.sft
        • Size 24KB
        • SHA256 fcca0e08e8a64081d71f3ad7455cb5bea48e73f158f0773e856fa100914fe192
        • MD5 SHA1 SHA512 SSDEEP TLSH

        oggflt.sft

        • Path C:\Users\Admin\AppData\Local\Temp\mrtFE31.tmp\oggflt.sft
        • Size 130KB
        • SHA256 9efb0b4cff5bb033cf1e04bdeabc581db7d787399c5238f4fb40a1e820aac6b8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pathfind.mfx

        • Path C:\Users\Admin\AppData\Local\Temp\mrtFE31.tmp\pathfind.mfx
        • Size 140KB
        • SHA256 0d017201a44510ad135a5e69606eee471f863158445aaa122fe29c719dbe0fa8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ultimatefullscreen.mfx

        • Path C:\Users\Admin\AppData\Local\Temp\mrtFE31.tmp\ultimatefullscreen.mfx
        • Size 73KB
        • SHA256 fd179783ff6e6eb0959185087f33ed4a1b256e58762d9817bcb16888e20f7058
        • MD5 SHA1 SHA512 SSDEEP TLSH

        waveflt.sft

        • Path C:\Users\Admin\AppData\Local\Temp\mrtFE31.tmp\waveflt.sft
        • Size 8KB
        • SHA256 98134d326a09569bd5933ffcb026009575509a1bfc20384ef8eebb762aabcd38
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/2676-34-0x0000000003240000-0x0000000003257000-memory.dmp

        memory/2676-75-0x0000000003700000-0x0000000003753000-memory.dmp

        memory/2676-84-0x0000000003770000-0x0000000003794000-memory.dmp