b6f134915bac6d630adb04d69f6944462bf5adfce2182f2908c2fb1bdd2da2fb

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
03/08/2026, 23:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
dxdllreg.exe
Size 78KB
Sample260803-3ff91adj8z
SHA256 b6f134915bac6d630adb04d69f6944462bf5adfce2182f2908c2fb1bdd2da2fb
MD5 967240f77a123434ce212ed77276dea1
SHA1 ac1ff591a5ba91b382578fb9f9b38d2de6379bf6
SHA512 30efe2e1e3e8221a0b368eec5a7e030efb04fd3f4f9d3f678d0eb2f7af1c5d5484d8bd7c8bcfd0bf349b87a34e6d779e7966fe004c7defa12eee4a33bc51af07
SSDEEP 1536:c3yqLKmzPYxsbQwTu9pS7OOC8c4aEuW/jGboizXyz36WBAOMhowYkrgHB3DSSSS7:wyqLKmzPYxt9PJh4aEuWKbx7WmDhDgHF
TLSH
T157735C11B794D036D892617849ACAB314B6E7DA1077883CBB78407EEADB16D05B3C3DB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\Logs\DirectX.log	dxdllreg.exe
File opened for modification	C:\Windows\Logs\DXError.log	dxdllreg.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	dxdllreg.exe

C:\Users\Admin\AppData\Local\Temp\dxdllreg.exe
"C:\Users\Admin\AppData\Local\Temp\dxdllreg.exe"
1⤵
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
PID:3644

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

DXError.log

Path C:\Windows\Logs\DXError.log
Size 467B
SHA256 c00c3f6c37b3d352063b183f400df9c63063b041bf5d434c3227fc4d3b0cb223
MD5 c9f34528323c79bd123baa1b9bbe5e49
SHA1 96459e88bafeaa42d95fbd8b8bb6923a763f5500
SHA512 5ec980cf26811a39cc60784af9ac801b5cb7272c1fd99cd0a968be681c5d632caaad6bffb914a28cec42dc886f99f85d3b5cf657be4aa4fa408e69541034dc4e
TLSH
T1F0F0E2202C45B0760883E478FB17230FCF116643E83816A0233A14CC4EA200A74CF55F
MD5 SHA1 SHA512 TLSH

Submit Download

DirectX.log

Path C:\Windows\Logs\DirectX.log
Size 595B
SHA256 b6f023b62abc096268861d2603e496be17b089f74ac6c586ec4ddd34ec654c07
MD5 5e7d098050396e9fb3e76b17745727bd
SHA1 6b4fcdbcac25b7dc1c36b26d60a690046d6caae9
SHA512 8fb15e437b3c7be8df8e289413cc636a34b40e3c79b327c080a2be5ae603ba5c69350935f19633d3894ea69592b54691ecf2a01a44de6000293aa4896c111559
TLSH
T139F08116BC65E1A20CC0D532FB2F620BDB07AA2BEC741AE4033174C4EC8504FB8CD96A
MD5 SHA1 SHA512 TLSH