556d73cf4a31bdcc056c8ff1b102da9bfb734e2bccc7d244efca02be50104057

Analysis

max time kernel
150s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/08/2026, 10:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
3730xl_UDC_v5.0.3_Patch.exe
Size 23.1MB
Sample260805-md6twadq3x
SHA256 556d73cf4a31bdcc056c8ff1b102da9bfb734e2bccc7d244efca02be50104057
MD5 9c857eb97007ffa13fc2b2d60feb84f7
SHA1 2cff2e0865070c7fe1766d7295d0492a9772333c
SHA512 3a7d3f299eb700bd4cf6d9e95c899d364522dc09fabc0940f0cc9f404948826c9ffac5cf7098d97f2c00e89956e0929661f01df739103a25d4484b32848c8a3e
SSDEEP 393216:wY9t3Lr7XLVUm3XGNVpCwiOUDEhqCe9lvBd9t3Lr7XLV3b4jGbc9tevcZAfbT:waxLr7L1XKpJiZDEhqCebJ7xLr7LhAMd
TLSH
T1A13733D0BAEFC9B9F0BEF83474387A74B30C1460100DED51A33558E5F6A56F856AA60E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Loads dropped DLL 2 IoCs

pid	Process
1564	3730xl_UDC_v5.0.3_Patch.exe
1564	3730xl_UDC_v5.0.3_Patch.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	3730xl_UDC_v5.0.3_Patch.exe

C:\Users\Admin\AppData\Local\Temp\3730xl_UDC_v5.0.3_Patch.exe
"C:\Users\Admin\AppData\Local\Temp\3730xl_UDC_v5.0.3_Patch.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:1564

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

AdvSplash.dll

Path C:\Users\Admin\AppData\Local\Temp\nsu74D9.tmp\AdvSplash.dll
Size 6KB
SHA256 14c398186951c10205d98c027d847b4dc1fd54dd64f15ed3d26c23884d68c851
MD5 2fa71d94db3104db6c998312a6ac0a37
SHA1 aa96b5c756edd09136da2d59583b6cbd54c3f5c3
SHA512 546fb63aa5a99462601840d7ced13f371fdf178b43ac53558f0076cca14d7fb74de7e397c209e14ba85dc11a047f11094f9ec6d178c88fdbbf375fc56a67acf2
SSDEEP 96:xIMNGPn/nysQ/aW3XvyOJF5Z8mULuxDtJA+wolpE:xIlPvyskXvyOZZ8TLUDta+I
TLSH
T1D1C1A637B2D265F3D29B01B16805779343A598713762981C0EA389C9EEA3EB7EC54743
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UserInfo.dll

Path C:\Users\Admin\AppData\Local\Temp\nsu74D9.tmp\UserInfo.dll
Size 4KB
SHA256 0893c4d31c7d9c2106eea64f10d6b17a00b742727662a883c39990bcee6a7d15
MD5 a189f9b1c9ef05e23e5aed0bdb2a1bf4
SHA1 584e9461cbb901aecabe61b4c3fbed146da0035f
SHA512 d9f34ea10b8174c031b25dace65f092dacd0e582e3b8cf1779ca9721f50a896cdd3be2cb6738a7ae487a3f8dc1b4548045ac6ca875138003903b0e6e055412ee
TLSH
T1EE8173BB92E00CF3D0A44BB740A71CE362B5DD201756001F4A478AA92590B67EE7E715
MD5 SHA1 SHA512 TLSH