Analysis
- max time kernel
300s - max time network
295s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
04/08/2026, 15:47
General
- Target Open to view.exe
- Size 253KB
- Sample260804-s8k4jsteph
- SHA256 78fc25ed9a673f26eadf03dd5472dc112155138410cd5c81f8b89ccef5bf0736
Malware Config
Signatures
- Executes dropped EXE 2 IoCs
- Loads dropped DLL 2 IoCs
- Checks whether UAC is enabled 1 TTPs 2 IoCs
- System Location Discovery: System Language Discovery 1 TTPs 3 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Checks processor information in registry 2 TTPs 4 IoCs
Processor information is often read in order to detect sandboxing environments.
- Suspicious behavior: EnumeratesProcesses 16 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Open to view.exe"C:\Users\Admin\AppData\Local\Temp\Open to view.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Microsoft\Open to view.exe"C:\Users\Admin\AppData\Local\Microsoft\Open to view.exe"2⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
-
-
C:\Users\Admin\AppData\Local\Microsoft\Open to view.exe"C:\Users\Admin\AppData\Local\Microsoft\Open to view.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
Open to view.exe
libcef.dll
7737bf938e0608011487eb768f74d536
7737bf938e0608011487eb768f74d536
memory/796-131-0x0000000073880000-0x0000000074B66000-memory.dmp
memory/796-133-0x0000000073880000-0x0000000074B66000-memory.dmp
memory/796-155-0x0000000073880000-0x0000000074B66000-memory.dmp
memory/796-151-0x0000000073880000-0x0000000074B66000-memory.dmp
memory/796-149-0x0000000073880000-0x0000000074B66000-memory.dmp
memory/796-145-0x0000000073880000-0x0000000074B66000-memory.dmp
memory/796-137-0x0000000073880000-0x0000000074B66000-memory.dmp
memory/796-135-0x0000000073880000-0x0000000074B66000-memory.dmp
memory/796-87-0x0000000002B90000-0x0000000002B92000-memory.dmp
memory/796-99-0x0000000004700000-0x00000000059E6000-memory.dmp
memory/796-107-0x0000000073880000-0x0000000074B66000-memory.dmp
memory/796-103-0x0000000073880000-0x0000000074B66000-memory.dmp
memory/796-94-0x0000000002B90000-0x0000000002B92000-memory.dmp
memory/796-129-0x0000000073880000-0x0000000074B66000-memory.dmp
memory/796-86-0x0000000002B90000-0x0000000002B92000-memory.dmp
memory/796-80-0x0000000073880000-0x0000000074B66000-memory.dmp
memory/796-79-0x0000000002A40000-0x0000000002AB1000-memory.dmp
memory/4916-2-0x0000000002FE0000-0x0000000003051000-memory.dmp
memory/4916-136-0x0000000073880000-0x0000000074B66000-memory.dmp
memory/4916-70-0x0000000006FE0000-0x0000000006FE4000-memory.dmp
memory/4916-69-0x0000000006FD0000-0x0000000006FD4000-memory.dmp
memory/4916-67-0x0000000006F50000-0x0000000006F54000-memory.dmp
memory/4916-9-0x0000000002FC0000-0x0000000002FC2000-memory.dmp
memory/4916-33-0x0000000073880000-0x0000000074B66000-memory.dmp
memory/4916-42-0x0000000004B30000-0x0000000005E16000-memory.dmp
memory/4916-43-0x0000000006620000-0x0000000006630000-memory.dmp
memory/4916-104-0x0000000073880000-0x0000000074B66000-memory.dmp
memory/4916-106-0x0000000073880000-0x0000000074B66000-memory.dmp
memory/4916-34-0x00000000062E0000-0x00000000062F0000-memory.dmp
memory/4916-110-0x0000000073880000-0x0000000074B66000-memory.dmp
memory/4916-74-0x0000000002FE0000-0x0000000003051000-memory.dmp
memory/4916-75-0x0000000073880000-0x0000000074B66000-memory.dmp
memory/4916-124-0x0000000073880000-0x0000000074B66000-memory.dmp
memory/4916-142-0x0000000073880000-0x0000000074B66000-memory.dmp
memory/4916-31-0x0000000073880000-0x0000000074B66000-memory.dmp
memory/4916-134-0x0000000073880000-0x0000000074B66000-memory.dmp
memory/4916-27-0x0000000004B30000-0x0000000005E16000-memory.dmp
memory/4916-30-0x0000000002FC0000-0x0000000002FC2000-memory.dmp
memory/4916-24-0x0000000002FC0000-0x0000000002FC2000-memory.dmp
memory/4916-132-0x0000000073880000-0x0000000074B66000-memory.dmp
memory/4916-3-0x0000000073880000-0x0000000074B66000-memory.dmp
memory/4916-148-0x0000000073880000-0x0000000074B66000-memory.dmp
memory/4916-6-0x0000000073881000-0x00000000738C5000-memory.dmp
memory/4916-150-0x0000000073880000-0x0000000074B66000-memory.dmp
memory/4916-11-0x0000000002FC0000-0x0000000002FC2000-memory.dmp
memory/4916-152-0x0000000073880000-0x0000000074B66000-memory.dmp
memory/4916-10-0x0000000073880000-0x0000000074B66000-memory.dmp