Analysis
- user interaction
yes - max time kernel
1s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/07/2026, 13:31
Behavioral task
behavioral1
Sample
TBXX_Flash_Tool.exe
Resource
win11-20260513-en
8 signatures
900 seconds
Behavioral task
behavioral2
Sample
TBXX_Flash_Tool.exe
Resource
win11ltsc2024-20260709-en
1 signatures
900 seconds
General
- Target TBXX_Flash_Tool.exe
- Size 27.9MB
- Sample260720-qse69adz21
- SHA256 a16dffe4f3ff0e85b8a14cba0388df71a84c19721bd18e4fadc44c216bc4c5a9
- MD5 d8e1b8e88e01ed45141bab8ac9ce13af
- SHA1 358b4e3e7f18ee54dface83db2c9fa1637b5fd86
- SHA512 8440bfb6acd923df9776820039150c78a6fa5865db4ea60a322dede573cfe9b646d770b8eb989741606849e3beae357c2a249eaa392bf1bd7055f3fa45e2d401
- SSDEEP 786432:eEMALRzMQBtLdUAqGNpfu2uSc4uWGlso5EYWCMqOI1V:B9zzBtLd5VpW2uSc4uZd5EE/
- TLSH T1F95733BCE6928436D120453189E0E7F1801D7CE1FB3BD90BD6397FA12A7BB85632526D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language TBXX_Flash_Tool.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\TBXX_Flash_Tool.exe"C:\Users\Admin\AppData\Local\Temp\TBXX_Flash_Tool.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4484 -
C:\Users\Admin\AppData\Local\Temp\TBXX_Flash_Tool.exe"C:\Users\Admin\AppData\Local\Temp\TBXX_Flash_Tool.exe"2⤵PID:1000
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\_MEI44842\PyQt5\QtWidgets.pyd
- Size 1.8MB
- SHA256 15c08a2b5ec73c7ce21cfb1f0124f55f162de58cf6d1eb00b163b35cdc82eb80
- MD5 0aea789d09c6eff3bc433745d55b3d89
- SHA1 6cc88f1a22dce31ad997b99bc82d1bd232df70c8
- SHA512 eeae88ecf924098f54f83e9d01ec9b45f9a1904ba4205a9386f71c7d71e56f2bc55bf55258a0f9e1c7f7aac6ba847711e49fd684a9888789ca37ba8bd92e3d9e
- SSDEEP 24576:8JHhIypYM3X04BCPOzVUhmZawgl14SR89ey96pRqgsR6o59V/AM2jdBsUthemS2w:8RJ
- TLSH T1D385BDEAE7B112ACF5D4C46817B287EE46055D4CAF4DC9C32637B50666E9DFF80382A0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI44842\Qt5Core.dll
- Size 1.8MB
- SHA256 10f6567731b63f339d151241e4928af0bacaeb169008d5446bd454272da02a69
- MD5 d33bb7ea2555e20c8bbe2727720f367d
- SHA1 7b9318b40c10a71f1315abf2262f55febfe7beba
- SHA512 93d804ab71e5798e53a26c7c5afb12587c21946bab83aef1655f5b7d8bc1141b389e8c8644ae5dfeb4fe670aa82be2de0b28c00a158b7636f2167e1873b10cb7
- SSDEEP 24576:8k/EJCNKLa+JsXRmKGwkoqJkX/pxBu9hIYG58bdFMgiqLmXN3ayF+3gtI2ONV:8rHKfvp64AQf3hFjQ
- TLSH T1EE856DD1DE2686BADA8990F1553E6B3F1518A60503524CD7C3FC2862EB216D23F3B787
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI44842\VCRUNTIME140.dll
- Size 84KB
- SHA256 1b372f064eacb455a0351863706e6326ca31b08e779a70de5de986b5be8069a1
- MD5 ae96651cfbd18991d186a029cbecb30c
- SHA1 18df8af1022b5cb188e3ee98ac5b4da24ac9c526
- SHA512 42a58c17f63cf0d404896d3b4bb16b2c9270cc2192aa4c9be265ed3970dfc2a4115e1db08f35c39e403b4c918be4ed7d19d2e2e015cb06b33d26a6c6521556e7
- SSDEEP 1536:RPwKQRaeU5QsPWFP/wPENm2eK7oJnoUSgpAY8ODcDcm7cIs+4ecbV6iVBoA2r:RwKQRbU5P4XwPENm2eK7mnoUSgpAY8Oa
- TLSH T17A837D11B1C040B1E15608B612E99B23FA7DA3734FD94DCF5FAA5C8C1AB93D2A73425B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI44842\_ctypes.pyd
- Size 105KB
- SHA256 6a6df7d77b7a5552d8443bd1b98f681ad2e6b5a8acf7ade542dd369beab7e439
- MD5 9db2d9962cbd754e91b40f91cbc49542
- SHA1 945ae09f678a4ca5f917339c304e5922e61dd588
- SHA512 a9d522f5768d265e2dca80faea239cc0ba7bec715d23058571651f8b61402650c01f3bca7f4d10e6806c8a553e79569dc852381d44169f535d63e85148d24e29
- SSDEEP 3072:EFvvoeWfh/jlH0GIQTL9XaT90NO/zZi+ujoBITVPaaCpT:ioHR5x1W0NO/zZ/uEpR
- TLSH T17BB37C817A8AB111EFDB40BD63D75EB1356FB09C4F7A08E366A900D845B49C36E3D34A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI44842\base_library.zip
- Size 769KB
- SHA256 ba7d743d7361dfdeb7e412413bcc26885fa6237b787d5eccc9f7bb04f334a354
- MD5 15e507241b01459e832a6061277277ba
- SHA1 024821ba52a1a66dc93cc309ad1641c5904368bc
- SHA512 fdce0eca675a75d53a0bf5952de0966295c7a02c03775fb0dadf71ac172fb7a417e7ba56e4702330c70fcc17b2e20946cb7f5f48aec22ee3f2b1630f72108d8b
- SSDEEP 12288:BCRMr5bf+Z81JJDnRbkqCfQETQlGVwyZV0X:AMr5XYfQETQlGVwyZGX
- TLSH T198F41AC05E866EB7FC6AF3BD411F86280A6C53375B88D1073A5D83AA1F4B7D01E35A49
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI44842\python37.dll
- Size 2.8MB
- SHA256 6045b188ee8fdac577bda631ae224893148ebab5a324707f1264934904672611
- MD5 5df6fddcb7ecc562f7892d06999c3813
- SHA1 8a11e70632ed5cff5e323b4c29e359919c39fc41
- SHA512 655aa86eb347a962377cd8346043fc44bf160aa6c774dc5ad217dca971c908923dd897ab48be3a3efb121112a03ce0f240a69353da978869de1310fd151ef420
- SSDEEP 49152:P8+exlMsuBmyrrn59LFjrF5if9tOpTLIK8VHsHMZnxPxbTRwEH:EP+3tF5ifvcTEKcHyMZPGc
- TLSH T113D55C35F401B029F8F129B3E3FE4AB604E59D58672690C365D53CC98A72BD326F924E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI44842\python37.dll
- Size 2.6MB
- SHA256 e026886db153b2d0dc07ac5a4aeeb2503252c1ffe64d8cb979fde9145aca818a
- MD5 59af5d0b51cf63277b7aea86c8981a96
- SHA1 dcc479d30c58aa7ae31afdfa15483ae189c531f0
- SHA512 f7e36c9d9a72f3cd7b0ad5f58199c9f00918a995ebff551b7e75befb22a9dcd27b7d4f65af47df7b1f5b31890e392e0cfe000acdf652f6495a3c887ad50e71d4
- SSDEEP 49152:P8+exlMsuBmyrrn59LFjrF5if9tOpTLIK8VHsHMZnxPxT:EP+3tF5ifvcTEKcHyMZPT
- TLSH T139C54C26B401B069F9D129B2E3FF4AF648E99D58673700C365D13D898A72BD3363D24E
- MD5 SHA1 SHA512 SSDEEP TLSH