Analysis

  • user interaction
    yes
  • max time kernel
    1s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    20/07/2026, 13:31

General

  • Target
    TBXX_Flash_Tool.exe
  • Size 27.9MB
  • Sample260720-qse69adz21
  • SHA256 a16dffe4f3ff0e85b8a14cba0388df71a84c19721bd18e4fadc44c216bc4c5a9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\TBXX_Flash_Tool.exe
    "C:\Users\Admin\AppData\Local\Temp\TBXX_Flash_Tool.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:4484
    • C:\Users\Admin\AppData\Local\Temp\TBXX_Flash_Tool.exe
      "C:\Users\Admin\AppData\Local\Temp\TBXX_Flash_Tool.exe"
      2⤵
        PID:1000

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          QtWidgets.pyd

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI44842\PyQt5\QtWidgets.pyd
          • Size 1.8MB
          • SHA256 15c08a2b5ec73c7ce21cfb1f0124f55f162de58cf6d1eb00b163b35cdc82eb80
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Qt5Core.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI44842\Qt5Core.dll
          • Size 1.8MB
          • SHA256 10f6567731b63f339d151241e4928af0bacaeb169008d5446bd454272da02a69
          • MD5 SHA1 SHA512 SSDEEP TLSH

          VCRUNTIME140.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI44842\VCRUNTIME140.dll
          • Size 84KB
          • SHA256 1b372f064eacb455a0351863706e6326ca31b08e779a70de5de986b5be8069a1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          _ctypes.pyd

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI44842\_ctypes.pyd
          • Size 105KB
          • SHA256 6a6df7d77b7a5552d8443bd1b98f681ad2e6b5a8acf7ade542dd369beab7e439
          • MD5 SHA1 SHA512 SSDEEP TLSH

          base_library.zip

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI44842\base_library.zip
          • Size 769KB
          • SHA256 ba7d743d7361dfdeb7e412413bcc26885fa6237b787d5eccc9f7bb04f334a354
          • MD5 SHA1 SHA512 SSDEEP TLSH

          python37.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI44842\python37.dll
          • Size 2.8MB
          • SHA256 6045b188ee8fdac577bda631ae224893148ebab5a324707f1264934904672611
          • MD5 SHA1 SHA512 SSDEEP TLSH

          python37.dll

          • Path C:\Users\Admin\AppData\Local\Temp\_MEI44842\python37.dll
          • Size 2.6MB
          • SHA256 e026886db153b2d0dc07ac5a4aeeb2503252c1ffe64d8cb979fde9145aca818a
          • MD5 SHA1 SHA512 SSDEEP TLSH