Analysis
- max time kernel
160s - max time network
186s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
21/07/2026, 22:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Angry Goy.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Angry Goy.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target Angry Goy.exe
- Size 666.2MB
- Sample260721-2d99mastfx
- SHA256 6fa2e70f90f032efe6903e9dc0f71d4af8bd21c6ce3c97dff71af0562addca66
- MD5 22afaddac68c5d76a36c4e2dcadb3286
- SHA1 4a7ae11a319fdd7446ba9e752f77e18eae65954a
- SHA512 4980880cf97ede5949397954682422eb9198a63438e70f692f345f35f6367657a21fc4094752b0c26c238a400d3bfa7fb1ef3cc443abb84ea929f4e89364118a
- SSDEEP 12582912:iTGxI44wTr6nPQLkM15B+tM+qUvNx9IuwZzQtaSzxwFSwg5DqjUguHtmyn2:iTQI444ZIM1HbUvf9IuwZzxSlUSwxekh
- TLSH T15F7933005AC0CDE5D96BE03540B92C26AB74BC3A873822EB5C61EF5FBD169D0D75B60B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 33 IoCs
pid Process 2624 Angry Goy.exe 2624 Angry Goy.exe 2624 Angry Goy.exe 2624 Angry Goy.exe 2624 Angry Goy.exe 2624 Angry Goy.exe 2624 Angry Goy.exe 2624 Angry Goy.exe 2624 Angry Goy.exe 2624 Angry Goy.exe 2624 Angry Goy.exe 2624 Angry Goy.exe 2624 Angry Goy.exe 2624 Angry Goy.exe 2624 Angry Goy.exe 2624 Angry Goy.exe 2624 Angry Goy.exe 2624 Angry Goy.exe 2624 Angry Goy.exe 2624 Angry Goy.exe 2624 Angry Goy.exe 2624 Angry Goy.exe 2624 Angry Goy.exe 2624 Angry Goy.exe 2624 Angry Goy.exe 2624 Angry Goy.exe 2624 Angry Goy.exe 2624 Angry Goy.exe 2624 Angry Goy.exe 2624 Angry Goy.exe 2624 Angry Goy.exe 2624 Angry Goy.exe 2624 Angry Goy.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Angry Goy.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2624 Angry Goy.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\mrt4E7F.tmp\KcArray.mfx
- Size 32KB
- SHA256 16f507da7814a6105122cbc5a881ee558dafdcd0edc57dcdbce6798aa9dd68ec
- MD5 454ced31d695ea4f83db1ff81ab5cce2
- SHA1 a1d1d16f66d4ba77ffbb46c2c703135b6abbb68f
- SHA512 4f6b36cb7d26cc5623e1608cd061f71bef7c2b67061e6ed4bd55fe09e4971f8099be704ce58c0e5d80329a3396ab82c25502867e6d6a0451913a420279983d9e
- SSDEEP 384:rocCYN+65kmg2isir1GpsFhM2e2Ch5qa9EepY8LMxG:UcCGg2itr1Gpx5rpY8g
- TLSH T118E2B545EBE244D4DAB61E7159FE7373B736BD436EBEA22A4200D42C2C32342EA15731
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\mrt4E7F.tmp\Layer.mfx
- Size 121KB
- SHA256 dc282ade390ae5bb7249595adac896d2436cf0eea5c63f31e44122173dc96daf
- MD5 4011f85fff8a854cdbc02c38b5e8e050
- SHA1 6e586270b1dccaa8fe5609abbf83fe60cd9772c1
- SHA512 cea258db8270ef6b8e4388babdd4915c19e0d4c6ae2b8c947cdd29d8a90153786dc2765e8726585e9c08798727910c4e941b39c12a2981dd0d2efc688890d015
- SSDEEP 1536:gLKGJp/Hmt7tzObJVyO9mxpimcCZsl9acp7cTksWjcdHyDo3+dCzfPbs/+eOsa8Q:gLKGJggyOgcCw9VSSs+sfPu/Ot8
- TLSH T1E4C34A1176E18072E5E307325D78AA520BBE7D22FB75DACBA35C014D5E703C19A39BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\mrt4E7F.tmp\StaticText.mfx
- Size 28KB
- SHA256 edb5e1c739e0bfee6e277c31230a59d45ac4da80b339f601bf454d4c620a8017
- MD5 7926f54bac335449719ab57e2ddb3f2a
- SHA1 5cc8e09b1e7f52474d5f1352cc97280b1d376b60
- SHA512 511a613ea8b023ea8968774effd79f2dcc8aac7d49a296c7753aa5a11a199296eac43904b533165f39c6327c6cd10ea1e3b35e3ac114ab673c8a6118e08462b3
- SSDEEP 192:TlXmQaK0iB0CiCrjQ2Ydt7oLMhM7VsQNfPAPZnYJfGMlJ5JjMX:RWQ/0RY/6dOL2M7aQN3FhGM9JjMX
- TLSH T107D2A3126BE518B6E4BEBABB1CBB173AAA74FD42A174C90F4150C53D1E22701AC10B33
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\mrt4E7F.tmp\adshow.mfx
- Size 40KB
- SHA256 c05b7b5fe45a20106ba776eec22dcbb606422edcae00942968cfd1f61046fc4c
- MD5 02b89ffb32c8c8db48732d61ea7587d2
- SHA1 42bc7b220123d2f1e2af88f9e37f53b6da6cc437
- SHA512 e07e8e95e0cedb27f654b040c9880234ad3ee01d3a30ab5c69b6ebae46d2efb0de689bcd1d9d1feaad4b6fe3583eacea2cb09bbcece3ce07399ff04a1f2870db
- SSDEEP 384:7HaGJuKXa2Km5N+UD6tE7SbTA6G3+xnVDLJvVhAdaB5mCfxa:z5uouGTcE7SHArGVDLJvVmdaB5Ff
- TLSH T19903090163F701F5E19A357128AB2B77963AFB591F79834B8B12EA2D1932380E539712
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\mrt4E7F.tmp\aviflt.ift
- Size 24KB
- SHA256 0eeffe2fa3c93f3ef62ec357b481d6caac0d3d190fb997ebea623dc5fd674f8c
- MD5 bcb767b3dd8769c14eeb15d44e3e8ee2
- SHA1 25c652e80a3d1892f6b351f6bcdd3e950b10af9c
- SHA512 2a652d40030b91366fd3fdec8611bfb4643e8f41ac723e513b9e5a5b583c7cf1f11768d41d9379d43f953d748eecca0dd84406af9e03a704cb80e9b87d4a0968
- SSDEEP 96:MP78rc9zp9HvjsedGNPUNAjtPq8y37QgavioyUuBdqaIZiMUjLepz5WY8FfH:M+cBvvjsedaPUctzyihSIZ8X+dWBf
- TLSH T111B2B539B38205ABFF1A0E71989733B35730F9B09B9682D74F10E98D2C61613D819B1B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\mrt4E7F.tmp\bmpflt.ift
- Size 24KB
- SHA256 b7eb74b793f9fb30439e54af504eefee675e73ec8342bd1be784225ded98cdf4
- MD5 ec49eb9e3ce55277caca4acce5080669
- SHA1 1e891bf4b6e4db661bf2bc2311f1fb4002f9216b
- SHA512 0d27400209366117b868401098fbbb2bdfb6115db7570eeb874a43e9e072b9ba5b082ff46b5bca9ce8119d0dc2ebd14e3aff2ad78ae324ef6e508c5e9b8ced44
- SSDEEP 96:JEMZE3IPfw8W3MvThiRz9gB+pOd9i6FsKxQM5/rEb:JESE3IP36M1q6EgdooGW/M
- TLSH T198B2B531A7D705B2EE978F3116A653325365FAF05BE0D3C70E91DA6E4D22482E831B61
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\mrt4E7F.tmp\ctrlx.mfx
- Size 44KB
- SHA256 3407eb12f6bacec5ebd4df96ff3fd34741a3919fd46c2ec527364c5f1e753a65
- MD5 ceb8b2e522d0aaaecdf69b3bcc89a530
- SHA1 c1cf769a96a9612f7fd0c1965413f4a57e4907e1
- SHA512 3c46743c635eb96351e6a82490cececb24e6a104433c962f263ec01cf78fa9747d4f56d05c3085c0a18eff7c180b145df5e8e74bc008fe2f617f7f4c24be0331
- SSDEEP 384:zZ0UzWLt4DGVwVpat0AwYUPr9mM8UUgAVrcQ5k3OEsRUcEIenwQAI4rj7rmUhgYY:90vtD3w4P8h7rKtDtNm
- TLSH T18A13B650738405A2D9BA6D36E8BE6F73D9797CE228F5E20F4A52CC5C60726D1F83071A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\mrt4E7F.tmp\fliflt.ift
- Size 28KB
- SHA256 4fff120c0c69c1c853cbb5ff83f16a199bc2e4f45c6f8c564b22c3c10b546732
- MD5 0eca70c6c3683aeeed66be7bf98efbcf
- SHA1 ab8a7da460e4cf816e7b798d37305b0e5d3a3761
- SHA512 0959e988be75d1e99be9a7a93d3c25909acb4c5bcf869e67a1fc814a5575435ffc78c6bf055b495e9b8d2a2952c5636e52478c4d060074b2ca71c07af43f307e
- SSDEEP 96:AGmPknHTCymEDV/P8JWYrP2YQaVfsOtUpHtdwReGp6FLiZz5Gu:J3nt1V/EJHrP2YPtsfttGzeidGu
- TLSH T13ED22952E3D594F6E96B857052D75A339230BDB94F88CA8BCF41CE4D0C23242AC25BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\mrt4E7F.tmp\gifflt.ift
- Size 28KB
- SHA256 4aa6628517c02816f033d79d386d7d817e7df74fe8cfae351312069fd4c61471
- MD5 6e2b70b830863820e9d6750ac7f7b9e1
- SHA1 1d4ddc85bc8dd853e95a65822d0d1966ec602979
- SHA512 7f3164202576f1b68f1197fa94423d28edd2d279f11c463c4c1f84ef0f075a4c9fd2c009184b18649b0e15fb7354f80a31e66e847be6fb6e18dc1eaff1a40719
- SSDEEP 192:VwanxqXUW6VDpwYMJP0R40392Wtcg4G9MsrhrwfI:cUDiJ00WP9MOZw
- TLSH T15CD21906975449B6E245C2F0265E7B37467237A04EA58B47CCE1DE6E2C22282ED38B37
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\mrt4E7F.tmp\jpgflt.ift
- Size 92KB
- SHA256 23a54d3586092ccd82bc42bdab0c5ece75f68d1f6313e717a815746b38a7f857
- MD5 1b8c0407f421ae454eef87edb2264698
- SHA1 e248285cdf8691d56243a81000fd667f84ff9550
- SHA512 a9fe4b02d6c58c590c051ed0b9375793cd22c56986072895e988c554d265f4243b45c8569dd300fe5c080c5a9addb5d7faab654a2be375992cbbaec8c94469d8
- SSDEEP 1536:b5VFtZCQE7sNB6EuWMVGLBhDeC1vm7X54vBxJbkaqHtFxmdC:bltZCrwn6E9vBeivOr1FxSC
- TLSH T14E936BC1B68740F1D9856B7060ABB7739F381B07158FDB93DB34ED624823622FD252A8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\mrt4E7F.tmp\kcedit.mfx
- Size 32KB
- SHA256 1945087c937b62ff8eb1999e7dbd0f19e8fa65f774575da89193cb69dc01cb9b
- MD5 e19e376a318c2183a9082d8bc1d28cf1
- SHA1 fe21b8d3e9aafd7ee977e0060654c1dd6da337fe
- SHA512 79d9e08ecb90c2f9eaf0d12dde8a509f6296fec80ccaaa143540a21fc64621cea51075bc415c9bb6c1dfd5c70f287a5df5092a62622a2fffae2ed098ccf6d031
- SSDEEP 384:1N1xSNw4BqZg7FL5fvuvJgLLvFDCeyqPPy0KKI:hw2mqZMmcLQeHPHKh
- TLSH T181E2C502ABB50C25E1F74E357D7BB736AAB2BE87793995071950DD3D1822203EC28B12
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\mrt4E7F.tmp\kcfile.mfx
- Size 36KB
- SHA256 daa25c6b2633009f655c0ea0503602ea220f9a5788e3ac7ca11c209be3246333
- MD5 beef4558c23ca51176a3ec1465cff89d
- SHA1 a8dda22b337ee4ff6f572603db69f0f6adb6f227
- SHA512 4ce528b244b4e125e61e67094c8c8041a2450db2aba2f95bd6f4b503116439b9b8dbe462c1199fe42c3687432d4475a77bf0730b5cecf8578856ee5b0e112c2a
- SSDEEP 384:Kognw23YeLui6fdiLDgGDBAOGOkHSlKIsfxWqPZlD0JOJlJAwHQ:KznwReLu98tDBxA9IiW6FpQ
- TLSH T111F2A30A5FF81861F4F66E357E7E22736938B9D59839C20F4210EC1E0973A17DAA5723
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\mrt4E7F.tmp\kcpica.mfx
- Size 32KB
- SHA256 0b53a54be890422520b1482eeda083b888fd99f9edfc58b17b0702af8c7ce724
- MD5 c55b51c61bc64d27854689e826a27b3c
- SHA1 7be563dbd3045d87978144b8501f8a9a1208e9f3
- SHA512 de38c556d6b63a5087bd2cd225f36b20136ce5e13b863b39fd68adaf9869d0cbe3ee23c7230894b77f2b00fb3b24a3c56a956c2f0f179aa7f2fef1a0668fc840
- SSDEEP 192:xRoZCJtczPVwOP4NllV9ulQwf1rr2msoIhj2fubHYnrzerm6rXDXNP2XZtkndJmD:cC8N5Anr9wX1uj/i7rQrTatkn7mD
- TLSH T126E22B53A7F69CA2C922A8B408BB723B9B3DF7C29919D6164724C51E6934340F866733
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\mrt4E7F.tmp\mmf2d3d9.dll
- Size 1.1MB
- SHA256 fce87bf918787de7e8be0419941033dd98285eba51c79cfe16295f06e7b7cbc8
- MD5 5e5ffd2560da7af01ad1d49357d0fe96
- SHA1 c32ac6a0fca8a662b2e6303f45dc2a0b92848277
- SHA512 f51daa8793d640201f1fa428c5c90c77b577188ba774bf2a1a0f418f8463760085e5b1c22cd70672023cbdee9c835633f5973b3c58a806b822721e77bc2a3dfe
- SSDEEP 24576:20WIxnHHiaNehdEUXcH/s8vofCHgyQMmhF:6wheh7GjQ5F
- TLSH T1BF35BF10F1928131C4A733350A67A37972BABF2509B585CB1BC83E7A3E745E1973939B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\mrt4E7F.tmp\mmfs2.dll
- Size 459KB
- SHA256 1cb098cfa35e4692cc2759a1b23100a1f6ccdc6da4dc2bd5abb586e207eeb0e5
- MD5 6ab37e080b4cc2466f9039ca42d61c48
- SHA1 5fe216adb6867ebfb3bed1eb26da0b48e30822e1
- SHA512 c3b5eb68cefbb1756a166751d26d7869617679f27fd95648fa8946bbcac60ea1ed9a3163f2b8081d52285df2fde7e77bea7b0de8e48b5c9ed9c79dc4d514722a
- SSDEEP 12288:7FoDewjvfMOLkoAVEz2jeWKaCpzGYRHVfLA2fPTgcoe7:7FoDewjvf6hVEonGzhRHPPTJo
- TLSH T155A4AE11F982C232E9FA12728ABCBE6A257D7A70477445E397844DBD1D701E21F327A3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\mrt4E7F.tmp\mp3flt.sft
- Size 24KB
- SHA256 cd5bd7cc59eaf42bc0edf418ce6f077f9db369d5e3c414107b82492a877a6176
- MD5 7beafd3ec0c36a1422387c43c49f68ff
- SHA1 240e7d8534ed25dffb902a969826f4300a88dde6
- SHA512 44101803bd757bb7a84577aa1c087472a619da732dcdb3947b683cd7a7df30931e4c9973e06532859f9654c4ad3635db205e41fc7214a0f52537be91e87b2734
- SSDEEP 96:24yW7bMnfxKgUEDGDaq5E9my5F3MM+YuU0UNESZpMS07oQCcw95bcPw5IqQ+5lyc:24y+MCQiaOC3j9dJlfMSkI5wPPzElt
- TLSH T18CB22C12B3E10CF5E15A5F311D9B023BAE75FB9917B862575F91C2391C33901A81B537
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\mrt4E7F.tmp\oggflt.sft
- Size 130KB
- SHA256 848d266c7676a5f59e66386d76679b97d2934166a8d829d5d000b217ab7a34cf
- MD5 e925b7e0be07bc86cb8042168077bb04
- SHA1 233c160b5264e1fa4f3b3ad6464207c09f698d26
- SHA512 0063b350116bfa478ecda081ae364e08c84cb97a337ff0b6e0d442653976c2663b8b2b430cca694f1a75fd93414d264b46da1331e7aadc2cdd424d69db27c31a
- SSDEEP 1536:sw+JHSmG5I1VKFMHU+lfGTFHKYPoPGTUBjnPabuxepe06DSIiRaEUsXxTTUE7:E5G5iE6qTFHdoPGTUBOKxyfSMR0Ij7
- TLSH T18AD39E529687A0FEE8CE1578546F367FCE221A0E7219CE539314EEF65C61E14BE1830B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\mrt4E7F.tmp\pcxflt.ift
- Size 24KB
- SHA256 81ce5610214cc648f6e968af8f31c1bce0430e4e9dc4427bba743bc6aadcba4e
- MD5 dbe5395c9508ef6f4a8cbe3973051a80
- SHA1 9b0d43f5ea8c11430aca42dfc381c82e557e31dd
- SHA512 c58dd464e755f77ea5da06ca70aa046e88d6a6543f8f0fe29ac16b0d2fc28cebd4a209c6ed1b059f09fe0d6b220e9e01f8c29c29b8336c8c0f1f20a1f99e6a91
- SSDEEP 48:CGEoIxd/dFALrcgFTudzDVQLwYdHf29btyU+CgjENjwXmwG8gjw6FQpJ0nwwlums:M/uq/YNufyU+9kw3CE6FQn0wKJz5mB
- TLSH T137B29433B3A605B6EF5B4E7065E2A2335775B9E09FA8C2870F41E69D1C26943EC20713
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\mrt4E7F.tmp\pngflt.ift
- Size 80KB
- SHA256 7bdae43096b32eb072731a93e6423a848459f385a2f5859629af40e389273f7d
- MD5 95e9db64a6248b00bfb42c2fde7e442b
- SHA1 a437b1c8b5a96bc58ff339007243d7be98591307
- SHA512 cfaaeab68ec6af3809a880a7abe65c33d8a91c9acd661c552e887b35b5f3426e278fd75aa02f95cc6c63c249474d7be6e57cc10329edb1fed05b4a7e614fc15e
- SSDEEP 1536:SfjrUDn1MuGECiFJAunIZd+OBEcbfgV4Ddmd:SfjrIfZof+O2cbYuDdS
- TLSH T1A8838DD3E180C0F1EAC60B3669A7F7379E3967974069DB829F94CF295C13641F628326
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\mrt4E7F.tmp\tgaflt.ift
- Size 24KB
- SHA256 bbfd34aa3f6a66e59f06e30103c6248eee54896364ee0c714819b9286b985880
- MD5 47ae23e71eb7daf3ea31cc2110421489
- SHA1 c03222469db64ef595afab571ef753af77996e4e
- SHA512 f1d33dab09b8c3913f629d459df64b8ddd237eaa7e9a4a136f20e3d7e3f50fa1b0b3bcda1baf4b5851ee726f961e16e6e8dd28b3b77578bc2a64a2c01a4deb4c
- SSDEEP 96:Ew31ACNxdaqSRKuUyU+xfE6FAQJz5mpn4/:ErCNxxZ0SRUdmpn4/
- TLSH T13BB2B43167AA1AB7EF974E3824FA52335779B9B01BE0C7824F80C61E0C36543ED50722
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\mrt4E7F.tmp\waveflt.sft
- Size 8KB
- SHA256 41136b09b033a20b9acc430620ea095ff76afbdc7aebe7f26f7d2b4315afddef
- MD5 f76739536860a0bdb4a7e3bbb0c06d08
- SHA1 b21581aa36eda87db8845caf58c668749e26b29f
- SHA512 6e65f23a4c1e3b0068b190f9aaaedcfa0466b0185cd6bbafa5f6f6940c8bc332e7c8c611d1b3b63bb2c5fcda48bbe2a678d81a3819940ecc0c701d6fec4194c7
- SSDEEP 96:v2or1Jnr+4O1tLj+Ct2KTOGTrgHchhAfETVdnPstJgxl8V6B/8cKH+ewp:vp6Dj9t2ubTVdGJgOMGvw
- TLSH T181F11C12A7A500F5F8DD0B7134B7627BE875FA295725C14FC544DE6C0C302E2D928BA7
- MD5 SHA1 SHA512 SSDEEP TLSH