Analysis
- max time kernel
154s - max time network
166s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/07/2026, 00:35
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Ultimate_Custom_Night_Unlocked_v114.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Ultimate_Custom_Night_Unlocked_v114.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
General
- Target Ultimate_Custom_Night_Unlocked_v114.exe
- Size 325.4MB
- Sample260730-axtbnswcjf
- SHA256 809563666d75e10c4b00ae4742bbef5aa1949af96631ed72763adb94c1996e16
- MD5 b982f62b8ab7124c1c9cfdee4daea6df
- SHA1 fc5e66564dcba03f6d7f2d13e286c8c693fec4a8
- SHA512 5b8bdd93d632eed37219178a493643ac021aeaf21fe7e50e05bebb2155691801e420689c3ec8d5112cbb428717974574ba05b87688c1259b5c95634941bf4015
- SSDEEP 6291456:neAMQFGjgsPccamFcYiUujQKZSDoDH6BPMlv1vuLsvqfJ7hhAQ2l:nYGrsPcvmFcYiUujR8qH6MbiNheQg
- TLSH T177F823E0F3889917E1D6BCB6C2629C3A701A6CA83E523001A5407B9DBF7D7E84F76751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 13 IoCs
pid Process 812 Ultimate_Custom_Night_Unlocked_v114.exe 812 Ultimate_Custom_Night_Unlocked_v114.exe 812 Ultimate_Custom_Night_Unlocked_v114.exe 812 Ultimate_Custom_Night_Unlocked_v114.exe 812 Ultimate_Custom_Night_Unlocked_v114.exe 812 Ultimate_Custom_Night_Unlocked_v114.exe 812 Ultimate_Custom_Night_Unlocked_v114.exe 812 Ultimate_Custom_Night_Unlocked_v114.exe 812 Ultimate_Custom_Night_Unlocked_v114.exe 812 Ultimate_Custom_Night_Unlocked_v114.exe 812 Ultimate_Custom_Night_Unlocked_v114.exe 812 Ultimate_Custom_Night_Unlocked_v114.exe 812 Ultimate_Custom_Night_Unlocked_v114.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Ultimate_Custom_Night_Unlocked_v114.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 812 Ultimate_Custom_Night_Unlocked_v114.exe 812 Ultimate_Custom_Night_Unlocked_v114.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\0ed19760-e932-45bd-82f8-c3e0bda43036.FusionApp\DRPC.mfx
- Size 861KB
- SHA256 5e7c4bcc7b722179ca5de3933d0e807d0d1630d8e5a0a51b98cce85199051ea5
- MD5 0aa331b547d0650059a75dbad66248f6
- SHA1 df01d62ecb2d263c80248c144d0b6212c0910767
- SHA512 9f4c0917cf39676c0c7145a21f1349d8ba981023a8c33990cf4046e852824a76ebab89371065ba546376fed95eeecf0accdbbf8fa99935ff4cb4622086c219bb
- SSDEEP 24576:vnKXGOuXtgFPNnL5tj112jGLF2eoRdDyLI3QALP/z2Ji0Kj3BmsdeAnQ:vpVsPJL5tj112jGLF2eoRdDyLI3QAf2t
- TLSH T15715AD113EC0C072D77B21310E29F66A55FEB5620D308A9F73EC4ABD6FB05836A26657
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\0ed19760-e932-45bd-82f8-c3e0bda43036.FusionApp\Perspective.mfx
- Size 15KB
- SHA256 090925a4cd961f22b1ecd2fba4ce04ab063e26507a1dc09b1d6a40c4860a8777
- MD5 9f064bdcb066daa428db0ed9e33e785d
- SHA1 3c0df73cf247ce49d1010fe0e2f722424fe43f4f
- SHA512 4a510ce13c379e8cb5ccb9f9c69e28e9440f48156c8c4c1fef6987495cace7c028d45530ac961f47786e8f503f90c54310cb1ccf43d7fd584506461c1bd616d5
- SSDEEP 192:ky3C1MfE8YG8vRLkodYlfqbVq1jVF2sLlMUL+Ah1AoEb+py+pIgucW:RGHDkodYOsLlMUL+Ah1ALbI/uc
- TLSH T15762E652EBF00468F0B7AA778CB6072B5671FD526EBADB4E8740040C9EB2B51DD25732
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\0ed19760-e932-45bd-82f8-c3e0bda43036.FusionApp\kcini.mfx
- Size 114KB
- SHA256 d1471b2685d45956c323baa2cab11dfe479eb1021f04e2949f03557527c5fc84
- MD5 7c0cb7fdc0d3519520cd4b8137edbd80
- SHA1 bd4eddd8316a51baf4a3ae68b56acfbba734f46c
- SHA512 601c16892bef77d5842e0778f27d4f82e19ae66333b2b75c9a34b3ba6441169946e1167ceb21ed270bddba305abfe50f2e8f8ab2e9dc410c96a31944e597034a
- SSDEEP 3072:pMHMC6xa0D4hBC3lwTu45NI6WRZG3vR5ULU:pMHMCIMhrlrJlRF
- TLSH T145B36C50B682C431E5BE0A314878EFA98A7DB9500F714DFB6398026D4F346D26F35E6B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\0ed19760-e932-45bd-82f8-c3e0bda43036.FusionApp\mmf2d3d11.dll
- Size 548KB
- SHA256 2aeca2207c6dabb6fc70f164f3d6188ed76f7786344654592ecef1752528ed13
- MD5 07163378491db6156398fc8e6582564d
- SHA1 6c702d8501431d38e8d392093795444a3900b004
- SHA512 296a0d861450a9c1e6724a6c03be38940dcad202a0a10002eae744d2c532a087e7c37c6088a3281fcd83ac197a0af4105a3c3157ee2527106d586be5993248b3
- SSDEEP 12288:k37fHyZr4SykN5fixzIx+5pzuLMH3nWDxx1j/Afk5Owi66b+kyvB7:kJSxNoxz8+5sLMXnWt/AOiJ+VJ7
- TLSH T159C46C02B6C1C837D42E13304897ABBAA27DB6010B65D7D373A8673D6D713C15F72A9A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\0ed19760-e932-45bd-82f8-c3e0bda43036.FusionApp\mmf2d3d9.dll
- Size 1.1MB
- SHA256 3cde7a9181ab63a42cd3535d279d0ab1397b7b78fa3ddddef832757ab2024101
- MD5 72bb9180f8905c0da95566b778cdac5e
- SHA1 e96145e8120514092b35f67f1f120b958997f921
- SHA512 c2c8d8c74c53a78545e69f27a7fe1a6d1291888158962e93e16e6ec9950f86e74c68bd2eb50d04db0bff58e8dc93455aa384245991c5afe34abee36fef53710f
- SSDEEP 24576:EE6cfv6jilsTCw8RCmttZtcJPFGySBDmXA4HwLSJcl:CyA8omXGSFmdkl
- TLSH T14135BE51F292C036C0AB23710657A3B932BDAF251D7585CB1A88BDBA3F345E147293DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\0ed19760-e932-45bd-82f8-c3e0bda43036.FusionApp\mmfs2.dll
- Size 510KB
- SHA256 6c9ff6036404e71b0bc2c12bc739eeef0d9200925f5796487af2aa4ef5c5ef97
- MD5 1e0e5acec2f2d3567c40491e39aa8f50
- SHA1 101ec3bbd32c005b12b38c0f7988faa9329a019f
- SHA512 80bbdd2dcc44494a53b14098b7e99db7c20b40650938454105b423e70906ad7371274ed73d3fccd114b9396112a695aebf37f6916976a972154cd562d10e01de
- SSDEEP 12288:tl2w5SNFe2TMNMfeZJyxqNEQ8W7zf+IL2SUoOHxwVoipcVDNLTrgLiFs+:edNFe2TMNMG4qNEQ8W7zGWYd1DLTEWy+
- TLSH T198B4AE10B982C231E4EA51B28AFDBFBE152C677047B858D75B4859BD1D301E32F3266B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\0ed19760-e932-45bd-82f8-c3e0bda43036.FusionApp\mp3flt.sft
- Size 24KB
- SHA256 ddeafda7b28bf7545e3ba164aa4a74219eb961c36bb974e0f5085a07daf18f44
- MD5 dadc138be9d36e6e4b8e4bf9ef2de4bc
- SHA1 2758db786c544ec7889f26edf9bc4634c9240af0
- SHA512 63a21c5eda225c7fb8a67595c3180d4fdc1bc37d3b45f839e1b562ef946bf5b2237a9ff17c3f6f5de489779bbb9652ac2a1a74b83f153883bd436756acf249e1
- SSDEEP 96:YDe4ApKjaU5qIu9my5F3hM+EX0025ZpMx07/nYwHZLoDK585qQ+5l:YDhAc2uXw32rX0ffMxdINoD5zEl
- TLSH T1E3B21A22B7A50CF6E1564E317DDB0377A57AFF9457A462479E82C23D0C33A02981B673
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\0ed19760-e932-45bd-82f8-c3e0bda43036.FusionApp\oggflt.sft
- Size 130KB
- SHA256 9e589f86317d840df9bb74f6ee20c24ca65afe58f4009740382f63a0f5531941
- MD5 0c8c1ee3ba92189f4ce21d1b396a2765
- SHA1 b7daa4a6e16416151dccbb0a89f304961b6cb627
- SHA512 0a4339092ac55bac3b1bdfaaa3401020f8f49918bd2fdb14524f3d558eb840b876aedfdeb54a1da163fa36393abf3fe8ab7e112a34ea9d891e82a22e96c85ddc
- SSDEEP 1536:Ww+JHBmul5IMIPkmLnFfUs3OF+KQ51PGTUBHnEJj0AtDLPJwdMSIiRaEUsXxTTUI:CCul5jEkSbOF+31PGTUBwoA8uMR0IjD
- TLSH T142D39E529687A0FEE8CE1978146F367FDE261A0D7218CD539314EEF69C61E10BE1930B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\0ed19760-e932-45bd-82f8-c3e0bda43036.FusionApp\waveflt.sft
- Size 8KB
- SHA256 92a5053cf5973a6aa228c738d55387f12f1dfa8a837d7b938c60f05b6b56b3ad
- MD5 57ea61dd14314ef155e80c6a0be8a664
- SHA1 963b0ef2fe976ff77044a821fe1e29be4a8cf8a7
- SHA512 cc23cb30d76d22500c3ed7ce9ee0388588309d0779441b95559fce25a42f1eff52ca285c347655f8b33c15b75f9d2067738a151f81f605d3b563799a3a06c9a9
- SSDEEP 96:vLor1Jnr+4O1tLj+Ct2KTOGTrgHchhAfETVdnPstJgxl8V6N/8cKH+ewp:v26Dj9t2ubTVdGJgOcGvw
- TLSH T16FF11B12A7A500F5F8DD0B7134B7627BE875FA285B11C24FC580DE6C0C301E2D928BAB
- MD5 SHA1 SHA512 SSDEEP TLSH