Analysis
- max time kernel
149s - max time network
146s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
29/07/2026, 19:09
General
- Target RePKG-GUI吾爱专版_v0.0.1.2/RePKG-GUI.exe
- Size 90KB
- Sample260729-xt97caek2y
- SHA256 d44128c29bb6e82a23be5ee2a9a2f6a63ae61aa4f5fbaa5d953e19613859c7a5
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Modifies system certificate store 2 TTPs 2 IoCs
- Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\RePKG-GUI吾爱专版_v0.0.1.2\RePKG-GUI.exe"C:\Users\Admin\AppData\Local\Temp\RePKG-GUI吾爱专版_v0.0.1.2\RePKG-GUI.exe"1⤵
- System Location Discovery: System Language Discovery
- Modifies system certificate store
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4564-0-0x0000000000600000-0x000000000061E000-memory.dmp
memory/4564-1-0x0000000004EF0000-0x0000000004F00000-memory.dmp
memory/4564-2-0x0000000004EF0000-0x0000000004F00000-memory.dmp
memory/4564-3-0x0000000008450000-0x0000000008458000-memory.dmp
memory/4564-4-0x00000000053E0000-0x0000000005418000-memory.dmp
memory/4564-5-0x00000000053B0000-0x00000000053BE000-memory.dmp
memory/4564-6-0x0000000004EF0000-0x0000000004F00000-memory.dmp
memory/4564-7-0x000000000BBE0000-0x000000000C386000-memory.dmp
memory/4564-8-0x0000000004EF0000-0x0000000004F00000-memory.dmp
memory/4564-9-0x0000000004EF0000-0x0000000004F00000-memory.dmp
memory/4564-10-0x0000000004EF0000-0x0000000004F00000-memory.dmp
memory/4564-11-0x0000000004EF0000-0x0000000004F00000-memory.dmp
memory/4564-12-0x0000000004EF0000-0x0000000004F00000-memory.dmp
memory/4564-13-0x0000000004EF0000-0x0000000004F00000-memory.dmp