bedb00c4d566fa6e1ee3cffc1a695e090e808fcad7d92e6e79792c292926b698

Analysis

user interaction
yes
max time kernel
50s
max time network
49s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/07/2026, 09:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
the-1916-shark-attack-s.exe
Size 13.5MB
Sample260729-lpfldss1f1
SHA256 bedb00c4d566fa6e1ee3cffc1a695e090e808fcad7d92e6e79792c292926b698
MD5 2363a1fab0290699982919b86c9b7d4d
SHA1 14cb3612ac3869ee9215746b76d3d82130913539
SHA512 785ba11a5aa02f342b5ba1993d66c67658830e25310cd4ac9fcfd42171875a6090f7484c215ede9e7db51a1e0d7d938d2cb0f0a630802c5a074438d1bce52ec9
SSDEEP 196608:HW63S9w1hslwRsF2lMPl/T9gsJbopReCTKoNJRERhCFWGkYk79bwW0mSeWWCdfBc:26Ci2h2yJ2VxNJ4h7HYKQRezDblEQ
TLSH
T164E62233BB5DC0DDC8E2E534FDB86A203E7A58E5273C05CBEE80567867216C059399E6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 8 IoCs

pid	Process
4180	the-1916-shark-attack-s.exe
4180	the-1916-shark-attack-s.exe
4180	the-1916-shark-attack-s.exe
4180	the-1916-shark-attack-s.exe
4180	the-1916-shark-attack-s.exe
4180	the-1916-shark-attack-s.exe
4180	the-1916-shark-attack-s.exe
4180	the-1916-shark-attack-s.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	the-1916-shark-attack-s.exe

C:\Users\Admin\AppData\Local\Temp\the-1916-shark-attack-s.exe
"C:\Users\Admin\AppData\Local\Temp\the-1916-shark-attack-s.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:4180

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

cctrans.dll

Path C:\Users\Admin\AppData\Local\Temp\12791219-ccb8-4df6-90be-e04ec766f140.FusionApp\cctrans.dll
Size 141KB
SHA256 55e75e784e436cccd978192fba869656f879f0f126e99b375c3849c99872ec56
MD5 ce3a36f85d2ea504b6d19c5f366c3f47
SHA1 972629c730b65c17ac2c751aafeb612d0c7432f2
SHA512 c6df293b4373552c3165ac27f2070973a8278bc72001a8c10f300ea30699a03811dc6a84864ff22aaa2b35d1ec75d41ceb2a8fee85b5404d4a5bbfd8333f248c
SSDEEP 3072:EjqYJijkm4k6wR/NQzjFEgYfriCJ+7NgGWb9UetPTztsYsRn:UqoY4sNQFE1fJZNTZxg
TLSH
T11FE35B00BAA08830E6FB543D08B5DBA52B7E79A4CFB08DDB2B54177D4E702C15F35A1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mmf2d3d9.dll

Path C:\Users\Admin\AppData\Local\Temp\12791219-ccb8-4df6-90be-e04ec766f140.FusionApp\mmf2d3d9.dll
Size 1.1MB
SHA256 4971b2294b825196a628a0a6855a14db99b491c66f39b046055f39b6dfbfc110
MD5 929afadfe861b220801a83b1e3fc1c4d
SHA1 dad1211a80b73c0dd6edb4203c45b222279767c8
SHA512 10603412e18b979b375cd6ebe6c3944e63676b38477ef6a24bce28f61891d2c47298b21fdc4622fa098dd865401cf1353d57ab4fe337612b41a0004f61d30579
SSDEEP 24576:+ymcsrzjX1hy+GEqhKDn0gMPE3W76c/MaP0yQTSjca:GN2EqhK7w6EMR9a
TLSH
T1E835BE61B292C036C0AB33710657A3B932BDAF151D7585CB1A88BDBA3F345E147293DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mmfs2.dll

Path C:\Users\Admin\AppData\Local\Temp\12791219-ccb8-4df6-90be-e04ec766f140.FusionApp\mmfs2.dll
Size 510KB
SHA256 987a24a65778ab670d4b5eafed78b7daef7a9d8c83e1899b2356601de900ede9
MD5 649db53e727bc6b6d97c120fade80b81
SHA1 d4179d0328eb1a1d206b6df712960f6e013efb00
SHA512 90c3615fc1970795db1eb32b0afb7c0c9097e490de1e887a568d583c443fd2962e318e3df32fe908a7d2956c297c3e8d44bb8a37bd126ce998968ed9c0f0dba6
SSDEEP 12288:bl2w5pNFeXTMNMP3/JyP5M3/NMpVKBpWjfL22UoOHxgVdvS6CBEsTrg35Knsk:ISNFeXTMNM/JPNMXKBpW9YUpVsTE3ssk
TLSH
T193B4AE10B982C231E4AA11B289F9BFBE152C677047B859D75B485DBD1D301E32F327AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mp3flt.sft

Path C:\Users\Admin\AppData\Local\Temp\12791219-ccb8-4df6-90be-e04ec766f140.FusionApp\mp3flt.sft
Size 24KB
SHA256 ddeafda7b28bf7545e3ba164aa4a74219eb961c36bb974e0f5085a07daf18f44
MD5 dadc138be9d36e6e4b8e4bf9ef2de4bc
SHA1 2758db786c544ec7889f26edf9bc4634c9240af0
SHA512 63a21c5eda225c7fb8a67595c3180d4fdc1bc37d3b45f839e1b562ef946bf5b2237a9ff17c3f6f5de489779bbb9652ac2a1a74b83f153883bd436756acf249e1
SSDEEP 96:YDe4ApKjaU5qIu9my5F3hM+EX0025ZpMx07/nYwHZLoDK585qQ+5l:YDhAc2uXw32rX0ffMxdINoD5zEl
TLSH
T1E3B21A22B7A50CF6E1564E317DDB0377A57AFF9457A462479E82C23D0C33A02981B673
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

oggflt.sft

Path C:\Users\Admin\AppData\Local\Temp\12791219-ccb8-4df6-90be-e04ec766f140.FusionApp\oggflt.sft
Size 130KB
SHA256 9e589f86317d840df9bb74f6ee20c24ca65afe58f4009740382f63a0f5531941
MD5 0c8c1ee3ba92189f4ce21d1b396a2765
SHA1 b7daa4a6e16416151dccbb0a89f304961b6cb627
SHA512 0a4339092ac55bac3b1bdfaaa3401020f8f49918bd2fdb14524f3d558eb840b876aedfdeb54a1da163fa36393abf3fe8ab7e112a34ea9d891e82a22e96c85ddc
SSDEEP 1536:Ww+JHBmul5IMIPkmLnFfUs3OF+KQ51PGTUBHnEJj0AtDLPJwdMSIiRaEUsXxTTUI:CCul5jEkSbOF+31PGTUBwoA8uMR0IjD
TLSH
T142D39E529687A0FEE8CE1978146F367FDE261A0D7218CD539314EEF69C61E10BE1930B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

waveFlt.sft

Path C:\Users\Admin\AppData\Local\Temp\12791219-ccb8-4df6-90be-e04ec766f140.FusionApp\waveFlt.sft
Size 8KB
SHA256 92a5053cf5973a6aa228c738d55387f12f1dfa8a837d7b938c60f05b6b56b3ad
MD5 57ea61dd14314ef155e80c6a0be8a664
SHA1 963b0ef2fe976ff77044a821fe1e29be4a8cf8a7
SHA512 cc23cb30d76d22500c3ed7ce9ee0388588309d0779441b95559fce25a42f1eff52ca285c347655f8b33c15b75f9d2067738a151f81f605d3b563799a3a06c9a9
SSDEEP 96:vLor1Jnr+4O1tLj+Ct2KTOGTrgHchhAfETVdnPstJgxl8V6N/8cKH+ewp:v26Dj9t2ubTVdGJgOcGvw
TLSH
T16FF11B12A7A500F5F8DD0B7134B7627BE875FA285B11C24FC580DE6C0C301E2D928BAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4180-18-0x00000000074F0000-0x0000000007514000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads