Analysis
- max time kernel
148s - max time network
142s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
22/07/2026, 08:41
General
- Target fabric-installer-1.1.1.exe
- Size 472KB
- Sample260722-kll4bscg24
- SHA256 488b5f4f1d5e422212c445978be256e2d1f7b96e882c750efc2a1c7e107de263
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of SetWindowsHookEx 2 IoCs
- Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fabric-installer-1.1.1.exe"C:\Users\Admin\AppData\Local\Temp\fabric-installer-1.1.1.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe"javaw.exe" "-version"2⤵
-
-
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe"javaw.exe" "-jar" "C:\Users\Admin\AppData\Local\Temp\fabric-installer-1.1.1.exe" "-fabricInstallerBootstrap" "true"2⤵
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
3903daac9bc4a3b7.timestamp
memory/1992-2-0x00000258DC190000-0x00000258DC400000-memory.dmp
memory/1992-12-0x00000258DA720000-0x00000258DA721000-memory.dmp
memory/1992-13-0x00000258DC190000-0x00000258DC400000-memory.dmp
memory/4100-16-0x0000018107460000-0x00000181076D0000-memory.dmp
memory/4100-26-0x00000181072C0000-0x00000181072C1000-memory.dmp
memory/4100-30-0x00000181072C0000-0x00000181072C1000-memory.dmp
memory/4100-33-0x00000181076D0000-0x00000181076E0000-memory.dmp
memory/4100-35-0x00000181076E0000-0x00000181076F0000-memory.dmp
memory/4100-37-0x00000181076F0000-0x0000018107700000-memory.dmp
memory/4100-39-0x0000018107700000-0x0000018107710000-memory.dmp
memory/4100-42-0x0000018107710000-0x0000018107720000-memory.dmp
memory/4100-43-0x0000018107720000-0x0000018107730000-memory.dmp
memory/4100-45-0x0000018107730000-0x0000018107740000-memory.dmp
memory/4100-47-0x0000018107740000-0x0000018107750000-memory.dmp
memory/4100-50-0x0000018107750000-0x0000018107760000-memory.dmp
memory/4100-49-0x0000018107460000-0x00000181076D0000-memory.dmp
memory/4100-52-0x0000018107760000-0x0000018107770000-memory.dmp
memory/4100-53-0x00000181072C0000-0x00000181072C1000-memory.dmp
memory/4100-58-0x00000181076E0000-0x00000181076F0000-memory.dmp
memory/4100-59-0x0000018107780000-0x0000018107790000-memory.dmp
memory/4100-57-0x0000018107770000-0x0000018107780000-memory.dmp
memory/4100-56-0x00000181076D0000-0x00000181076E0000-memory.dmp
memory/4100-62-0x0000018107790000-0x00000181077A0000-memory.dmp
memory/4100-61-0x00000181076F0000-0x0000018107700000-memory.dmp
memory/4100-65-0x00000181077A0000-0x00000181077B0000-memory.dmp
memory/4100-64-0x0000018107700000-0x0000018107710000-memory.dmp
memory/4100-68-0x00000181077B0000-0x00000181077C0000-memory.dmp
memory/4100-67-0x0000018107710000-0x0000018107720000-memory.dmp
memory/4100-71-0x00000181077C0000-0x00000181077D0000-memory.dmp
memory/4100-70-0x0000018107720000-0x0000018107730000-memory.dmp
memory/4100-74-0x00000181077D0000-0x00000181077E0000-memory.dmp
memory/4100-73-0x0000018107730000-0x0000018107740000-memory.dmp
memory/4100-77-0x00000181077E0000-0x00000181077F0000-memory.dmp
memory/4100-76-0x0000018107740000-0x0000018107750000-memory.dmp
memory/4100-80-0x0000018107750000-0x0000018107760000-memory.dmp
memory/4100-81-0x00000181077F0000-0x0000018107800000-memory.dmp
memory/4100-84-0x0000018107800000-0x0000018107810000-memory.dmp
memory/4100-83-0x0000018107770000-0x0000018107780000-memory.dmp
memory/4100-82-0x0000018107760000-0x0000018107770000-memory.dmp
memory/4100-86-0x0000018107810000-0x0000018107820000-memory.dmp
memory/4100-89-0x0000018107780000-0x0000018107790000-memory.dmp
memory/4100-90-0x0000018107820000-0x0000018107830000-memory.dmp
memory/4100-93-0x0000018107830000-0x0000018107840000-memory.dmp
memory/4100-92-0x0000018107790000-0x00000181077A0000-memory.dmp
memory/4100-98-0x0000018107840000-0x0000018107850000-memory.dmp
memory/4100-97-0x00000181077A0000-0x00000181077B0000-memory.dmp
memory/4100-99-0x00000181072C0000-0x00000181072C1000-memory.dmp
memory/4100-103-0x0000018107850000-0x0000018107860000-memory.dmp
memory/4100-102-0x00000181077B0000-0x00000181077C0000-memory.dmp
memory/4100-106-0x0000018107860000-0x0000018107870000-memory.dmp
memory/4100-105-0x00000181077C0000-0x00000181077D0000-memory.dmp
memory/4100-108-0x00000181077D0000-0x00000181077E0000-memory.dmp
memory/4100-109-0x0000018107870000-0x0000018107880000-memory.dmp
memory/4100-112-0x0000018107880000-0x0000018107890000-memory.dmp
memory/4100-111-0x00000181077E0000-0x00000181077F0000-memory.dmp
memory/4100-115-0x0000018107890000-0x00000181078A0000-memory.dmp
memory/4100-114-0x00000181077F0000-0x0000018107800000-memory.dmp
memory/4100-117-0x0000018107800000-0x0000018107810000-memory.dmp
memory/4100-118-0x00000181078A0000-0x00000181078B0000-memory.dmp
memory/4100-121-0x00000181072C0000-0x00000181072C1000-memory.dmp
memory/4100-125-0x00000181078B0000-0x00000181078C0000-memory.dmp
memory/4100-127-0x0000018107820000-0x0000018107830000-memory.dmp
memory/4100-126-0x00000181078C0000-0x00000181078D0000-memory.dmp
memory/4100-124-0x0000018107810000-0x0000018107820000-memory.dmp
memory/4100-129-0x0000018107830000-0x0000018107840000-memory.dmp
memory/4100-130-0x00000181078D0000-0x00000181078E0000-memory.dmp
memory/4100-134-0x0000018107840000-0x0000018107850000-memory.dmp
memory/4100-135-0x00000181078E0000-0x00000181078F0000-memory.dmp
memory/4100-136-0x00000181072C0000-0x00000181072C1000-memory.dmp
memory/4100-139-0x0000018107850000-0x0000018107860000-memory.dmp
memory/4100-140-0x00000181078F0000-0x0000018107900000-memory.dmp
memory/4100-143-0x0000018107900000-0x0000018107910000-memory.dmp
memory/4100-142-0x0000018107860000-0x0000018107870000-memory.dmp
memory/4100-147-0x0000018107870000-0x0000018107880000-memory.dmp
memory/4100-148-0x0000018107910000-0x0000018107920000-memory.dmp
memory/4100-150-0x0000018107930000-0x0000018107940000-memory.dmp
memory/4100-149-0x0000018107880000-0x0000018107890000-memory.dmp
memory/4100-151-0x0000018107890000-0x00000181078A0000-memory.dmp
memory/4100-152-0x0000018107920000-0x0000018107930000-memory.dmp
memory/4100-153-0x00000181072C0000-0x00000181072C1000-memory.dmp
memory/4100-156-0x0000018107940000-0x0000018107950000-memory.dmp
memory/4100-155-0x00000181078A0000-0x00000181078B0000-memory.dmp
memory/4100-159-0x0000018107950000-0x0000018107960000-memory.dmp
memory/4100-158-0x00000181078B0000-0x00000181078C0000-memory.dmp
memory/4100-161-0x00000181078C0000-0x00000181078D0000-memory.dmp
memory/4100-162-0x0000018107960000-0x0000018107970000-memory.dmp
memory/4100-165-0x0000018107970000-0x0000018107980000-memory.dmp
memory/4100-164-0x00000181078D0000-0x00000181078E0000-memory.dmp
memory/4100-167-0x00000181078E0000-0x00000181078F0000-memory.dmp
memory/4100-170-0x00000181078F0000-0x0000018107900000-memory.dmp
memory/4100-171-0x0000018107990000-0x00000181079A0000-memory.dmp
memory/4100-168-0x0000018107980000-0x0000018107990000-memory.dmp
memory/4100-176-0x00000181079B0000-0x00000181079C0000-memory.dmp
memory/4100-177-0x0000018107910000-0x0000018107920000-memory.dmp
memory/4100-175-0x00000181079A0000-0x00000181079B0000-memory.dmp
memory/4100-174-0x0000018107900000-0x0000018107910000-memory.dmp
memory/4100-183-0x0000018107920000-0x0000018107930000-memory.dmp
memory/4100-182-0x00000181079D0000-0x00000181079E0000-memory.dmp
memory/4100-181-0x00000181079C0000-0x00000181079D0000-memory.dmp
memory/4100-180-0x0000018107930000-0x0000018107940000-memory.dmp
memory/4100-184-0x00000181072C0000-0x00000181072C1000-memory.dmp
memory/4100-187-0x00000181079E0000-0x00000181079F0000-memory.dmp
memory/4100-186-0x0000018107940000-0x0000018107950000-memory.dmp
memory/4100-195-0x00000181072C0000-0x00000181072C1000-memory.dmp
memory/4100-198-0x0000018107950000-0x0000018107960000-memory.dmp
memory/4100-199-0x00000181079F0000-0x0000018107A00000-memory.dmp