Analysis

  • max time kernel
    154s
  • max time network
    166s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    30/07/2026, 00:35

General

  • Target
    Ultimate_Custom_Night_Unlocked_v114.exe
  • Size 325.4MB
  • Sample260730-axtbnswcjf
  • SHA256 809563666d75e10c4b00ae4742bbef5aa1949af96631ed72763adb94c1996e16
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 13 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Ultimate_Custom_Night_Unlocked_v114.exe
    "C:\Users\Admin\AppData\Local\Temp\Ultimate_Custom_Night_Unlocked_v114.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:812

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        DRPC.mfx

        • Path C:\Users\Admin\AppData\Local\Temp\0ed19760-e932-45bd-82f8-c3e0bda43036.FusionApp\DRPC.mfx
        • Size 861KB
        • SHA256 5e7c4bcc7b722179ca5de3933d0e807d0d1630d8e5a0a51b98cce85199051ea5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Perspective.mfx

        • Path C:\Users\Admin\AppData\Local\Temp\0ed19760-e932-45bd-82f8-c3e0bda43036.FusionApp\Perspective.mfx
        • Size 15KB
        • SHA256 090925a4cd961f22b1ecd2fba4ce04ab063e26507a1dc09b1d6a40c4860a8777
        • MD5 SHA1 SHA512 SSDEEP TLSH

        kcini.mfx

        • Path C:\Users\Admin\AppData\Local\Temp\0ed19760-e932-45bd-82f8-c3e0bda43036.FusionApp\kcini.mfx
        • Size 114KB
        • SHA256 d1471b2685d45956c323baa2cab11dfe479eb1021f04e2949f03557527c5fc84
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mmf2d3d11.dll

        • Path C:\Users\Admin\AppData\Local\Temp\0ed19760-e932-45bd-82f8-c3e0bda43036.FusionApp\mmf2d3d11.dll
        • Size 548KB
        • SHA256 2aeca2207c6dabb6fc70f164f3d6188ed76f7786344654592ecef1752528ed13
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mmf2d3d9.dll

        • Path C:\Users\Admin\AppData\Local\Temp\0ed19760-e932-45bd-82f8-c3e0bda43036.FusionApp\mmf2d3d9.dll
        • Size 1.1MB
        • SHA256 3cde7a9181ab63a42cd3535d279d0ab1397b7b78fa3ddddef832757ab2024101
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mmfs2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\0ed19760-e932-45bd-82f8-c3e0bda43036.FusionApp\mmfs2.dll
        • Size 510KB
        • SHA256 6c9ff6036404e71b0bc2c12bc739eeef0d9200925f5796487af2aa4ef5c5ef97
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mp3flt.sft

        • Path C:\Users\Admin\AppData\Local\Temp\0ed19760-e932-45bd-82f8-c3e0bda43036.FusionApp\mp3flt.sft
        • Size 24KB
        • SHA256 ddeafda7b28bf7545e3ba164aa4a74219eb961c36bb974e0f5085a07daf18f44
        • MD5 SHA1 SHA512 SSDEEP TLSH

        oggflt.sft

        • Path C:\Users\Admin\AppData\Local\Temp\0ed19760-e932-45bd-82f8-c3e0bda43036.FusionApp\oggflt.sft
        • Size 130KB
        • SHA256 9e589f86317d840df9bb74f6ee20c24ca65afe58f4009740382f63a0f5531941
        • MD5 SHA1 SHA512 SSDEEP TLSH

        waveflt.sft

        • Path C:\Users\Admin\AppData\Local\Temp\0ed19760-e932-45bd-82f8-c3e0bda43036.FusionApp\waveflt.sft
        • Size 8KB
        • SHA256 92a5053cf5973a6aa228c738d55387f12f1dfa8a837d7b938c60f05b6b56b3ad
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/812-22-0x0000000002B70000-0x0000000002C82000-memory.dmp

        memory/812-37-0x0000000002F00000-0x0000000002F24000-memory.dmp