Overview

overview

7

Static

static

3

sonic-exe-...mo.exe

windows10-2004-x64

7

sonic-exe-...mo.exe

windows10-ltsc_2021-x64

7

Analysis

  • max time kernel
    300s
  • max time network
    39s
  • platform
    windows10-ltsc_2021_x64
  • resource
    win10ltsc2021-20260513-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
  • submitted
    30/07/2026, 17:00

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    sonic-exe-one-last-round-demo.exe
  • Size 85.6MB
  • Sample260730-vjabvsce77
  • SHA256 659968ce3a86cd2cfb2c1c057ce871d06e40bafe905667230519279b6af59835
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discovery

Malware Config

Signatures

  • Loads dropped DLL 36 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\sonic-exe-one-last-round-demo.exe
    "C:\Users\Admin\AppData\Local\Temp\sonic-exe-one-last-round-demo.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:2444

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Box2DBase.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt26FB.tmp\Box2DBase.mfx
        • Size 284KB
        • SHA256 286605641cdba584c563d7241c106bc9ea9d3e5a22028ed92e7f5cabd33e1e4b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Box2DParticules.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt26FB.tmp\Box2DParticules.mfx
        • Size 116KB
        • SHA256 d96b7d91eebd3ae5f967d2726d00beb834be41a113aded49298da94cbdae48db
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DlgBox.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt26FB.tmp\DlgBox.mfx
        • Size 68KB
        • SHA256 d02b0af749a7c5e3ecbfb6dbca69749615f1a010218d31c3bdb9baedc110ec1a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Easing.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt26FB.tmp\Easing.mfx
        • Size 124KB
        • SHA256 94e316853aee0d728f763c32fac17632b02ea7da647976f3e1c441cd908fbe3a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Joystick2.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt26FB.tmp\Joystick2.mfx
        • Size 171KB
        • SHA256 75649299fb633f0753966ab8b7be56c97bf0e6e913e80685e5b41e7293c85b3c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        KcArray.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt26FB.tmp\KcArray.mfx
        • Size 32KB
        • SHA256 6021f990d325ff8594c1a8f53f9b75d74a80a5bf7a6e260ab72e823a0439632d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Perspective.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt26FB.tmp\Perspective.mfx
        • Size 24KB
        • SHA256 42285d953d9688e2d44f3b2a11d78b6a97ad3a26ed8042ab3a98527678e82bba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        XBOXGamepad.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt26FB.tmp\XBOXGamepad.mfx
        • Size 64KB
        • SHA256 54286bc3449bc3c7191a0f16e99d2811020c8903d2c603cadf6e1105da2c66db
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ZipObject.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt26FB.tmp\ZipObject.mfx
        • Size 56KB
        • SHA256 fedbfbbba75d20bbb7372dd0a70a437a787b93cf6818f38a254ccd1cd27463a3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cctrans.dll
        • Path C:\Users\Admin\AppData\Local\Temp\mrt26FB.tmp\cctrans.dll
        • Size 347KB
        • SHA256 9b834b5d26983451ef3a11c8c2a715724daa188fbd28597081ecb1e9ed672f87
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        clickteam-circular.mvx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt26FB.tmp\clickteam-circular.mvx
        • Size 28KB
        • SHA256 671a01a39fa56a32fc0a43b16038d3077202734a7beacd50d73439011a74a4cb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ctrlx.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt26FB.tmp\ctrlx.mfx
        • Size 44KB
        • SHA256 3407eb12f6bacec5ebd4df96ff3fd34741a3919fd46c2ec527364c5f1e753a65
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        joystick.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt26FB.tmp\joystick.mfx
        • Size 36KB
        • SHA256 2b4346eab390370db0f7ed1261e3c38d36d749c078b235f63be62a4317e33eea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kcfile.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt26FB.tmp\kcfile.mfx
        • Size 36KB
        • SHA256 1d1a83db2abfea8c92008e99e7dd12bd3c01e92baf5f2297f8874aa400f2e761
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kcini.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt26FB.tmp\kcini.mfx
        • Size 330KB
        • SHA256 5af175ffb932fb653873dad095dd40f2ab8d3fb56f287213c21bb68652ddad2d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kcwctrl.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt26FB.tmp\kcwctrl.mfx
        • Size 63KB
        • SHA256 0666e52ea54bb2bdb81216443ea0787b8fcc6292b64d6bdf285eebf42e1bbae6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mmf2d3d11.dll
        • Path C:\Users\Admin\AppData\Local\Temp\mrt26FB.tmp\mmf2d3d11.dll
        • Size 541KB
        • SHA256 5f6563d6bf2f3ceab8b2ca2c15ba4f7fe882a82c1f72b10041b5692c6515a53a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mmf2d3d9.dll
        • Path C:\Users\Admin\AppData\Local\Temp\mrt26FB.tmp\mmf2d3d9.dll
        • Size 1.5MB
        • SHA256 bddda991185a9e83b9855a109f2fcfa78cd2d5402e9db344c6ec77f6ce69a0c5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mmfs2.dll
        • Path C:\Users\Admin\AppData\Local\Temp\mrt26FB.tmp\mmfs2.dll
        • Size 768KB
        • SHA256 763ef4484ba9b9e10e19268c045732515f0ac143cf075e6d1ea1f5adcc77633b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mp3flt.sft
        • Path C:\Users\Admin\AppData\Local\Temp\mrt26FB.tmp\mp3flt.sft
        • Size 24KB
        • SHA256 81c9a9459a8e124793addf142cd513945d6fe600e1d67f74897898d7570e56b2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        oggflt.sft
        • Path C:\Users\Admin\AppData\Local\Temp\mrt26FB.tmp\oggflt.sft
        • Size 130KB
        • SHA256 9e589f86317d840df9bb74f6ee20c24ca65afe58f4009740382f63a0f5531941
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        txtblt.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt26FB.tmp\txtblt.mfx
        • Size 36KB
        • SHA256 09a214d9738946b14c4470ea95b45de41641e5d69b7559dbf336f7b4624859b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ultimatefullscreen.mfx
        • Path C:\Users\Admin\AppData\Local\Temp\mrt26FB.tmp\ultimatefullscreen.mfx
        • Size 73KB
        • SHA256 fd179783ff6e6eb0959185087f33ed4a1b256e58762d9817bcb16888e20f7058
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        waveflt.sft
        • Path C:\Users\Admin\AppData\Local\Temp\mrt26FB.tmp\waveflt.sft
        • Size 8KB
        • SHA256 92a5053cf5973a6aa228c738d55387f12f1dfa8a837d7b938c60f05b6b56b3ad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/2444-46-0x0000000001100000-0x0000000001120000-memory.dmp
        Download

        memory/2444-80-0x0000000003030000-0x0000000003041000-memory.dmp
        Download

        memory/2444-60-0x0000000002940000-0x000000000296F000-memory.dmp
        Download

        memory/2444-107-0x00000000032D0000-0x00000000032F4000-memory.dmp
        Download

        memory/2444-53-0x0000000001130000-0x0000000001179000-memory.dmp
        Download