Overview
overview
3Static
static
3dizfree/di...it.exe
windows10-2004-x64
3dizfree/di...it.exe
windows11-ltsc_2024-x64
3dizfree/di...nt.rtf
windows10-2004-x64
1dizfree/di...nt.rtf
windows11-ltsc_2024-x64
1dizfree/di...te.rtf
windows10-2004-x64
1dizfree/di...te.rtf
windows11-ltsc_2024-x64
1dizfree/di...ex.rtf
windows10-2004-x64
1dizfree/di...ex.rtf
windows11-ltsc_2024-x64
1dizfree/di...et.rtf
windows10-2004-x64
1dizfree/di...et.rtf
windows11-ltsc_2024-x64
1dizfree/di...pe.rtf
windows10-2004-x64
1dizfree/di...pe.rtf
windows11-ltsc_2024-x64
1dizfree/di...rl.rtf
windows10-2004-x64
1dizfree/di...rl.rtf
windows11-ltsc_2024-x64
1dizfree/di...et.rtf
windows10-2004-x64
1dizfree/di...et.rtf
windows11-ltsc_2024-x64
1Analysis
- max time kernel
150s - max time network
146s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
27/07/2026, 13:19
Static task
static1
Behavioral task
behavioral1
Sample
dizfree/dizsubmitfree/DiZsubmit.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
dizfree/dizsubmitfree/DiZsubmit.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
dizfree/dizsubmitfree/count.rtf
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
dizfree/dizsubmitfree/count.rtf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
dizfree/dizsubmitfree/date.rtf
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
dizfree/dizsubmitfree/date.rtf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
dizfree/dizsubmitfree/index.rtf
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
dizfree/dizsubmitfree/index.rtf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
dizfree/dizsubmitfree/otvet.rtf
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
dizfree/dizsubmitfree/otvet.rtf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
dizfree/dizsubmitfree/type.rtf
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
dizfree/dizsubmitfree/type.rtf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
dizfree/dizsubmitfree/url.rtf
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
dizfree/dizsubmitfree/url.rtf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
dizfree/dizsubmitfree/zamet.rtf
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
dizfree/dizsubmitfree/zamet.rtf
Resource
win11ltsc2024-20260709-en
General
- Target dizfree/dizsubmitfree/DiZsubmit.exe
- Size 902KB
- Sample260727-qkhbmsbb56
- SHA256 ef2ae11fd472c7b6dba547e2900761bc03a9cbcdf69c0ca621318b09aacefdc9
- MD5 34fd990c539d93f9fc14563aea990783
- SHA1 cf6b49502a67d4a6220fefa310b58070bd86da9b
- SHA512 0a1be3372786ea5f4e33367ee7acfa7c4d3797767e0b3358c139c5843b36a9b68bd36f849ad3b5532d203d0d2bdf4e05fb1352c2b33c990fe57b391dde0da6ad
- SSDEEP 12288:SYnCt7csFbAKCxyDzEDLPdNuw3miJsfX4N2GF+UfWiICffuD2Xw+:SYnCPqYwDLPdc/iJswdFn4
- TLSH T190157C22B6928833C17316748D9BA7A1663BFF113A24464B37F52D4C6FB9B803D16397
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language DiZsubmit.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3116 DiZsubmit.exe 3116 DiZsubmit.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\FVWEMWAY\dnserrordiagoff[1]
- Size 1KB
- SHA256 a705d1e0916a79b0d6e60c41a9ce301ed95b3fc00e927f940ab27061c208a536
- MD5 7e81a79f38695e467a49ee41dd24146d
- SHA1 035e110c36bf3072525b05394f73d1ba54d0d316
- SHA512 53c5f2f2b9ad8b555f9ae6644941cf2016108e803ea6ab2c7418e31e66874dea5a2bc04be0fa9766e7206617879520e730e9e3e0de136bae886c2e786082d622
- TLSH T1FA319E152DE449176271E8C2A9FAFA28FCF2815383049988F0AD226F2F76E888C43159
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\WC9PHKHK\NewErrorPageTemplate[1]
- Size 1KB
- SHA256 77b138ab5d0a90ff04648c26addd5e414cc178165e3b54a4cb3739da0f58e075
- MD5 dfeabde84792228093a5a270352395b6
- SHA1 e41258c9576721025926326f76063c2305586f76
- SHA512 e256f603e67335151bb709294749794e2e3085f4063c623461a0b3decbcca8e620807b707ec9bcbe36dcd7d639c55753da0495be85b4ae5fb6bfc52ab4b284fd
- TLSH T1DD31678DDA02D053F3BB1C2A37A22711EA28454759569B387BE47704CFFA43D6211F8D
- MD5 SHA1 SHA512 TLSH