d7190ad8cdc908bc8fe3c7c289c480393c2e701496bd3cf06cb93df9988630d7

Analysis

max time kernel
148s
max time network
147s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 02:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
dcsetup.exe
Size 12.8MB
Sample260804-cqeaaaen5v
SHA256 d7190ad8cdc908bc8fe3c7c289c480393c2e701496bd3cf06cb93df9988630d7
MD5 20823b38fbc85e73566627139b9e9ab4
SHA1 db67de2024f62d2b47860cf0cabf71bf2c659768
SHA512 e9a9de1af7a1a90c094dcb231ee551affb1f517034596def74735ecc67e82268dfc0cf03e7f448cbf3ac828e0551bedd8778062ba634a9041be6367b6dc741e3
SSDEEP 393216:Yyha51DRDO7aDdOoZYmipUCCLKYxmy3NYBs:YL1lKuD08YmoUxmy93
TLSH
T1E5D6336A9A089588D1F37D30B88103238759ED1FE59C17E390CB9E3E3FE57CA49151AB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Loads dropped DLL 3 IoCs

pid	Process
1132	dcsetup.exe
1132	dcsetup.exe
1132	dcsetup.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	dcsetup.exe

C:\Users\Admin\AppData\Local\Temp\dcsetup.exe
"C:\Users\Admin\AppData\Local\Temp\dcsetup.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:1132

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

DiskCleaner.ini

Path C:\Users\Admin\AppData\Local\Temp\nsm3A9F.tmp\DiskCleaner.ini
Size 612B
SHA256 42c497e8fca350f4a35fc4107df111ffb5790c2fe802ddb9513704b5b93fba35
MD5 fa281fe6059abb0af42051e267e44c71
SHA1 9a09d38538a8a4d726e9412c9fbbc30b6c4c5836
SHA512 7bd49e85dad79cfe7b930b941442e4100b3bee02ad2d74fe99b77556572251f00f94f15cf01b4fd7c3d56b09b9c5ebc7348cd5f5e67a6810ccdbe86147c039a7
TLSH
T102F0A24E0944835D59758055157F32E2B7F02A20CE4124F4F1A010A3E7FDCE5D8BD6DE
MD5 SHA1 SHA512 TLSH

Submit Download

InstallOptions.dll

Path C:\Users\Admin\AppData\Local\Temp\nsm3A9F.tmp\InstallOptions.dll
Size 14KB
SHA256 31944b93e44301974d9c6f810d2da792e34a53dcacd619a08cb0385ac59e513d
MD5 5f35212d7e90ee622b10be39b09bd270
SHA1 c4bc9593902adf6daaef37e456dc6100d50d0925
SHA512 7514810367f56d994c6d5703b56ac16124fab5dfdcfbe337d4413274c1ff9037a2ee623e49ab2fb6227412ab29fcc49a3ada1391910d44c2b5de0adeb3e7c2f0
SSDEEP 192:E4n3T5aK+dHCMR1aQR9RuZl3WWmU7WYZsw1JpVGnrjaK72dwF7dBOne:tn3T5KdHCMRD/R1cOnrja+BO
TLSH
T187622B55738488F3DBE2003E785237079B995565B4929ED2CA275FC6687B08D7EB2303
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsm3A9F.tmp\System.dll
Size 11KB
SHA256 6fcea34c8666b06368379c6c402b5321202c11b00889401c743fb96c516c679e
MD5 fccff8cb7a1067e23fd2e2b63971a8e1
SHA1 30e2a9e137c1223a78a0f7b0bf96a1c361976d91
SHA512 f4335e84e6f8d70e462a22f1c93d2998673a7616c868177cac3e8784a3be1d7d0bb96f2583fa0ed82f4f2b6b8f5d9b33521c279a42e055d80a94b4f3f1791e0c
SSDEEP 192:xPtkiQJr7V9r3HcU17S8g1w5xzWxy6j2V7i77blbTc4v:g7VpNo8gmOyRsVc4
TLSH
T116326D5503504AF3E996863C00263B7FAF796A2095F14D53CFA394C0FE2E5C9AD38352
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsDialogs.dll

Path C:\Users\Admin\AppData\Local\Temp\nsm3A9F.tmp\nsDialogs.dll
Size 9KB
SHA256 8780095aa2f49725388cddf00d79a74e85c9c4863b366f55c39c606a5fb8440c
MD5 1c8b2b40c642e8b5a5b3ff102796fb37
SHA1 3245f55afac50f775eb53fd6d14abb7fe523393d
SHA512 4ff2dc83f640933162ec8818bb1bf3b3be1183264750946a3d949d2e7068ee606277b6c840193ef2b4663952387f07f6ab12c84c4a11cae9a8de7bd4e7971c57
SSDEEP 96:o2DlD3cd51V1zL7xqEscxM2DjDf3GEst+Nt+jvcx4T8qndYv0PLE:o2p34z/x3sREskpx4dO0PLE
TLSH
T13012F8135A4454B3C9E6223A31AA2F2EDB3C9324D0627D02C7779E5A2BB42167D3E356
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads