Analysis
- max time kernel
149s - max time network
145s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
29/07/2026, 10:18
General
- Target PrintMQClient(202106)/MQPrintClientManager.exe
- Size 524KB
- Sample260729-mcap2sdr7w
- SHA256 d0f9b377a0b693598c231d9174cda32226cce0afb4995811a7259302d52eabef
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\PrintMQClient(202106)\MQPrintClientManager.exe"C:\Users\Admin\AppData\Local\Temp\PrintMQClient(202106)\MQPrintClientManager.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3680-0-0x0000000000420000-0x00000000004AA000-memory.dmp
memory/3680-1-0x00000000055E0000-0x0000000005B84000-memory.dmp
memory/3680-2-0x0000000004E80000-0x0000000004F12000-memory.dmp
memory/3680-3-0x0000000005020000-0x0000000005030000-memory.dmp
memory/3680-4-0x0000000005010000-0x000000000501A000-memory.dmp
memory/3680-5-0x00000000063D0000-0x000000000646C000-memory.dmp
memory/3680-6-0x00000000055A0000-0x00000000055B0000-memory.dmp
memory/3680-7-0x00000000083E0000-0x0000000008734000-memory.dmp
memory/3680-8-0x0000000006900000-0x0000000006922000-memory.dmp
memory/3680-9-0x0000000005020000-0x0000000005030000-memory.dmp
memory/3680-10-0x0000000005020000-0x0000000005030000-memory.dmp
memory/3680-11-0x0000000005020000-0x0000000005030000-memory.dmp