f5075acc9af3a036bde5fc256032f8d324497bc7a210a2221f79168aa8feb385

Analysis

user interaction
yes
max time kernel
118s
max time network
123s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/08/2026, 03:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Pianoteq PORTABLE.exe
Size 125.4MB
Sample260803-d3ebgsbp3t
SHA256 f5075acc9af3a036bde5fc256032f8d324497bc7a210a2221f79168aa8feb385
MD5 55098cab43248c60eb355722c1688b3a
SHA1 e110b45a06c9a2e91f4839dd4027a433c20b8952
SHA512 572e84fb5d659fceec88683dfa0bd39bad61fd1ca89c1cf93b1b8b792d91ab3563580dde01d13a47d6c3d7a75ef2b00e1b8319834c95776f21e354426caf9115
SSDEEP 3145728:P5qx0XENs/pAQP6q3p7touMnOtdiWDqUyIdE+36U4CkjhVKc5d:P5qx0FSQSq5GLIVKLjN
TLSH
T11D583323024A9C11DD3960F1214E1BF172D8FD6029A965BA2730FF19B578B6074EF7BA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Drops desktop.ini file(s) 2 IoCs

description	ioc	Process
File created	C:\PianoteqPortable\x64\AAX\Pianoteq 6.aaxplugin\desktop.ini	Pianoteq PORTABLE.exe
File opened for modification	C:\PianoteqPortable\x64\AAX\Pianoteq 6.aaxplugin\desktop.ini	Pianoteq PORTABLE.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Pianoteq PORTABLE.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
5544	Pianoteq PORTABLE.exe
5544	Pianoteq PORTABLE.exe

C:\Users\Admin\AppData\Local\Temp\Pianoteq PORTABLE.exe
"C:\Users\Admin\AppData\Local\Temp\Pianoteq PORTABLE.exe"
1⤵
- Drops desktop.ini file(s)
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:5544

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads