Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
21/07/2026, 16:04
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
simplewall-3.8.7-setup.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
simplewall-3.8.7-setup.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
General
- Target simplewall-3.8.7-setup.exe
- Size 1.1MB
- Sample260721-tjbdgsel5z
- SHA256 1864b3e2830c5ffadefb01a25d0aedba36a9acbdb8f257a722718b0b1d1aa144
- MD5 1a11d721fd8fb70a6d73c16f9e401ba6
- SHA1 563b41f2cbc77c81d644b30070cd553c04e93aff
- SHA512 5dd11515c2cd2f006c9eb3d35a41188dfc08d59eb6beae75919175ed6b2c61304e171a058f250737d4304b98a3e31efb5b917f8a77efe783b7c8f91955aae280
- SSDEEP 24576:LjEG6cCkgfcRWILFlAdNWgMh45KbmIt9BsWO33JJgMo:L/6uffUNWR45Y10Xg/
- TLSH T1DA45339A37C5C873E11A36B085B69533A5317F050C1BC72F6648EF92DC61F6CAC2AE19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
pid Process 1612 simplewall-3.8.7-setup.exe 1612 simplewall-3.8.7-setup.exe 1612 simplewall-3.8.7-setup.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Drops file in Program Files directory 7 IoCs
description ioc Process File created C:\Program Files\simplewall\History.txt simplewall-3.8.7-setup.exe File created C:\Program Files\simplewall\License.txt simplewall-3.8.7-setup.exe File created C:\Program Files\simplewall\Readme.txt simplewall-3.8.7-setup.exe File created C:\Program Files\simplewall\uninstall.exe simplewall-3.8.7-setup.exe File created C:\Program Files\simplewall\simplewall.lng simplewall-3.8.7-setup.exe File created C:\Program Files\simplewall\simplewall.exe simplewall-3.8.7-setup.exe File created C:\Program Files\simplewall\simplewall.exe.sig simplewall-3.8.7-setup.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language simplewall-3.8.7-setup.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files\simplewall\simplewall.exe
- Size 960KB
- SHA256 771ddeb26f40e9a77f07de02cca06e1c160254609b6e0e714654fb7da009eac3
- MD5 ce6a1911e7c9de84c67802513158b671
- SHA1 da9224cff86de7836edf684ddb0266be1641f435
- SHA512 e88454b576e9fdfe00382ca0cdc489416d4e42608c5c3be7abab68c66d005dc47a363b3f665b691785e3922a5c39907e0bdbdaccdd25f64a1fa2bb4ffb4db272
- SSDEEP 24576:OuzcmOLiXze3EHXrYTgSFz73iFKyJ9FnSgVF3qtGg:OuzcmOLiUKrYTgSFz73iFKyJ3nSWVm
- TLSH T1B8258D56B6E9D0EAD13B8138C96754B2FAB13C919771CCCB5120BD593F33E922A3A701
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsp4EF3.tmp\LangDLL.dll
- Size 5KB
- SHA256 06ae451307548775dd5c5eb5de5a8b7a89c0030d51800e7d9d870f8f2e7c9d7d
- MD5 a0bbb2991f1296a7e22d5d0f2d5294a9
- SHA1 b52f22df139f75f13b89c486bf86894b27e27531
- SHA512 5d97ac897ab4c414ddb48743c336b8fc8992f7a49585f70aa883614c80612d96a6fbe5e9f36239ed3440405162b1a1e532fc4bd884d33fc063911bd529b0398d
- SSDEEP 48:am1iUTBzeApYxmolxaK1pPsEXWFGWEVq+GSft2J18m0ofYZVST:+ozGbxaGpPdXWAWEVD0umwV
- TLSH T1C4B18179E3D048F5D6A14537688337D7AA12BE106B08404E8B6726DA2A10DEBEF3D781
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsp4EF3.tmp\System.dll
- Size 12KB
- SHA256 1be52c4b0f82a9e50db06ccf9a4df2e59baf7448bad4372a10a435b60c7ea1db
- MD5 5be41037d3dbc850580f8b7d023bd50c
- SHA1 43817dbf0f5946c2c237b86153d50d760e1f94b3
- SHA512 e2f6febe21ce647d0d82ca6d2842085283a9fe39c0788c2cabe6097baec447bb54ccb503156d958fc8520ef0d7ef47e6303e1466cc305383ad8a17d708a6bcef
- SSDEEP 192:MOSbXQL3c1GO+kgkiGwIYbh2hreiKextZXs48po:aXQLM1GuiGgdkeBextV386
- TLSH T18A425B165B70CAF2F2110A3908A67E176B7CAE7857F448B39FE7088179943D72575383
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsp4EF3.tmp\modern-wizard.bmp
- Size 150KB
- SHA256 411961864a8edb7cc2ba384e702bbb787040ea47488d2cefc2ef2c6f0a55a832
- MD5 48992d90bf2b3360d2301802a0c25900
- SHA1 b16b11f83534f5467a8d7c570370eb71f57e84ad
- SHA512 5a25418162b4c8753840174ec01a8a0eca808d11b77bd27120400b92382e69bca4d02cea35afc874e7fb9e591e20cabf7d43e34f0e4a439f2d84b47d0c1b30a3
- SSDEEP 48:LqdOFoa0jnNVVVVVVVVVVVVVVVVVVVVASCPKPKPfPgPqPnoyccccccccccccccc2:+dOWZ43sbm1gG
- TLSH T161E37DF735F46DB33500649F77675AB0942EBF7825A623A1903A3C7A4836FC6089C798
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsp4EF3.tmp\nsDialogs.dll
- Size 9KB
- SHA256 357e519087cfc27a16a2c083389225d21af48cae138c9b0448c5d87175a3a13e
- MD5 f63b78d055e5d9490dea4af5f8ea842c
- SHA1 06e41953ecb4d8eee9d58716c90417c6836fe3e8
- SHA512 3ec0fc799a6837be494d81f6bd9328b9d03f8c422bfdcd50859d5379232132143c46c501df046902dd03bba58588a24b0354ff91684cb4a1fd7c23c24aa4221a
- SSDEEP 192:qsZFPwo/6/cwZ0W8XBAU3mR73FWNyX27:qsHo3/c8W2F/X2
- TLSH T17412E897B69984F3D2AF123633951727C7B85324F0A52C07C6738E4E78742CAAE34706
- MD5 SHA1 SHA512 SSDEEP TLSH