Overview

overview

3

Static

static

3

78ccd06e6f...28.exe

windows10-2004-x64

3

78ccd06e6f...28.exe

windows11-ltsc_2024-x64

3

Analysis

  • max time kernel
    150s
  • max time network
    133s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    31/07/2026, 13:32

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    78ccd06e6f1ba4bd1ac47162c7be5722e13c1bc1a425e5e6dc13e9ea18001c28.exe
  • Size 2.3MB
  • Sample260731-qszkwstfpd
  • SHA256 78ccd06e6f1ba4bd1ac47162c7be5722e13c1bc1a425e5e6dc13e9ea18001c28
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
discovery

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious use of FindShellTrayWindow 4 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\78ccd06e6f1ba4bd1ac47162c7be5722e13c1bc1a425e5e6dc13e9ea18001c28.exe
    "C:\Users\Admin\AppData\Local\Temp\78ccd06e6f1ba4bd1ac47162c7be5722e13c1bc1a425e5e6dc13e9ea18001c28.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    PID:2468

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Exit.bmp
        • Path C:\Users\Admin\AppData\Local\Temp\SettingFiles\Settings\Image\Exit.bmp
        • Size 822B
        • SHA256 b002f6e879c13b598096fb413d2f752902ded8c2c875d17dff15ce6cfb3252ee
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Exit_mo.bmp
        • Path C:\Users\Admin\AppData\Local\Temp\SettingFiles\Settings\Image\Exit_mo.bmp
        • Size 822B
        • SHA256 68d888f8b86e9ac53a23064182466cffd185db5aba9d86f0f38ca5192fe07004
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        background.bmp
        • Path C:\Users\Admin\AppData\Local\Temp\SettingFiles\Settings\Image\background.bmp
        • Size 498KB
        • SHA256 d444c39a228aebc90d21b0d30db1c88d46e707bde28e6b15c5321d5ba36b69d6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        start.bmp
        • Path C:\Users\Admin\AppData\Local\Temp\SettingFiles\Settings\Image\start.bmp
        • Size 22KB
        • SHA256 d7352834586d7c48d55e9dd6b4959f305670ad3027c90cb000ca4780aee48dfb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        start_d.bmp
        • Path C:\Users\Admin\AppData\Local\Temp\SettingFiles\Settings\Image\start_d.bmp
        • Size 22KB
        • SHA256 ccc93644dbd5f513238532b204e3c800349871e10a84da52db42d4554162804f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        start_mo.bmp
        • Path C:\Users\Admin\AppData\Local\Temp\SettingFiles\Settings\Image\start_mo.bmp
        • Size 22KB
        • SHA256 dabf1dce4f0c3fe19e848d2d08a93f4765bf6d895b4be4b61cc280eb68da470e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UISettings.ini
        • Path C:\Users\Admin\AppData\Local\Temp\SettingFiles\Settings\UISettings.ini
        • Size 3KB
        • SHA256 c4a0f0dff35f6a339f028252c223cae55109c66219c708408f30617ca5bc0b6b
        • MD5 SHA1 SHA512 TLSH
        Submit Download