Overview
overview
8Static
static
7Install.exe
windows10-2004-x64
3Install.exe
windows11-ltsc_2024-x64
3saa713x.sys
windows10-2004-x64
3saa713x.sys
windows11-ltsc_2024-x64
3Flasher/fl...er.exe
windows10-2004-x64
8Flasher/fl...er.exe
windows11-ltsc_2024-x64
8Flasher/re...h.html
windows10-2004-x64
3Flasher/re...h.html
windows11-ltsc_2024-x64
3Flasher/re...63.htm
windows10-2004-x64
3Flasher/re...63.htm
windows11-ltsc_2024-x64
3FlyTest/FlyPCI.sys
windows10-2004-x64
3FlyTest/FlyPCI.sys
windows11-ltsc_2024-x64
3FlyTest/FlyTest.dll
windows10-2004-x64
3FlyTest/FlyTest.dll
windows11-ltsc_2024-x64
3FlyTest/FlyTest.exe
windows10-2004-x64
8FlyTest/FlyTest.exe
windows11-ltsc_2024-x64
8Patch/Patch480.exe
windows10-2004-x64
3Patch/Patch480.exe
windows11-ltsc_2024-x64
3Plugins/BP...ts.dll
windows10-2004-x64
3Plugins/BP...ts.dll
windows11-ltsc_2024-x64
3Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
29/07/2026, 03:10
Behavioral task
behavioral1
Sample
Install.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Install.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
saa713x.sys
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
saa713x.sys
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Flasher/flasher31032006/saa713x flasher.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Flasher/flasher31032006/saa713x flasher.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
Flasher/readme/flash.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Flasher/readme/flash.html
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral9
Sample
Flasher/readme/flash_files/163.htm
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Flasher/readme/flash_files/163.htm
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
FlyTest/FlyPCI.sys
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
FlyTest/FlyPCI.sys
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
FlyTest/FlyTest.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
FlyTest/FlyTest.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
FlyTest/FlyTest.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
FlyTest/FlyTest.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
Patch/Patch480.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
Patch/Patch480.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
Plugins/BPP_CHSwitchingEffects.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
Plugins/BPP_CHSwitchingEffects.dll
Resource
win11ltsc2024-20260709-en
General
- Target Patch/Patch480.exe
- Size 256KB
- Sample260729-dpeebsvxfw
- SHA256 7475656ed09ffbf73a22e19a3ea88f494c166acf22deda88e15b0baae7eef279
- MD5 57489aa6e5fdfd776b475945acd2072c
- SHA1 2ad15f79e068a75491245b8347c18f3842d5ee3b
- SHA512 744bb3d6e11628858d15ce9f710a42afcb4b46649a24b0f2d003a3ab3bd813024aa7f067551f8d18ac3358c8ba1fcf1ddcdc7989dd57ada3a9b6b82a9d5be18f
- SSDEEP 6144:XA27mPXjWSa6+3qAYlHvu6sHwNGmmhSIkcun:bCPXiSaNqAPRwzifkc
- TLSH T1EC448D1272E4C477C16711720EE297AAB2B5FC648F768B8777853B0DED326C16A36342
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Patch480.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 632 Patch480.exe 632 Patch480.exe