d2cb2b1b89dfeb565e0ae3ed1cba7d00186eadf3820f330cf03d0bb4231ac61a

Analysis

max time kernel
164s
max time network
116s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/08/2026, 18:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
UpdaterSetup.exe
Size 29.2MB
Sample260805-w11e2stcnd
SHA256 d2cb2b1b89dfeb565e0ae3ed1cba7d00186eadf3820f330cf03d0bb4231ac61a
MD5 6f095eab04a3f52fd97161ea4b8c4db7
SHA1 de9cbf1006e690b4eb2987d0a45a84b6bf3c700b
SHA512 7fec84c6358492beb809b9e907625157fe33d8758c348baa90f637c0251bd9934973b5a12ddf4cda73757ffeed0d596fc427e6a7571ac7a05712168049b30910
SSDEEP 786432:U0ay2tMT8mWDACjI421oykeL0Z40kB0kPel8Z6yiMtx:U0ctYHXCE4qLuZxkiK
TLSH
T10E673326F318C716C84354328F9BB65947947E3AED5588B5EB443B1EEE7A083823C64F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Loads dropped DLL 3 IoCs

pid	Process
4836	UpdaterSetup.exe
4836	UpdaterSetup.exe
4836	UpdaterSetup.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	UpdaterSetup.exe

C:\Users\Admin\AppData\Local\Temp\UpdaterSetup.exe
"C:\Users\Admin\AppData\Local\Temp\UpdaterSetup.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:4836

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

InstallOptions.dll

Path C:\Users\Admin\AppData\Local\Temp\nsg9ED7.tmp\InstallOptions.dll
Size 15KB
SHA256 c7fef6457989d97fecc0616a69947927da9d8c493f7905dc8475c748f044f3cf
MD5 ece25721125d55aa26cdfe019c871476
SHA1 b87685ae482553823bf95e73e790de48dc0c11ba
SHA512 4e384735d03c943f5eb3396bb3a9cb42c9d8a5479fe2871de5b8bc18db4bbd6e2c5f8fd71b6840512a7249e12a1c63e0e760417e4baa3dc30f51375588410480
SSDEEP 384:EXsC43tPegZ3eBaRwCPOYY7nNYXC06/Yosa:EXJTgZ3eBTCmrnNA5p
TLSH
T1E1624D1137C558B3E2D62A797EE3B7138FA5F722A4438E0BC7332E06281A5956E7C311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsg9ED7.tmp\System.dll
Size 12KB
SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
MD5 cff85c549d536f651d4fb8387f1976f2
SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
TLSH
T126426B129BB089F2F591583814667F2A6FBE9C5D27F50563CFE304D63D212CB983A283
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nsg9ED7.tmp\ioSpecial.ini
Size 1KB
SHA256 00eedf374698848868a1c8222db965628528871bf7a072897d72a12f03415933
MD5 6a6d236d42f299630e5101e291ab0710
SHA1 06a19591180f805a542c3fbd223dede0e6f205dc
SHA512 12e108230ccd765ab1fad42a8f5ff077142c622236c2005ce6258a47319b26534cdcdd75c99f2e62f13edaada9ad84133641c41fbafe0fad4f224042811ba624
TLSH
T19F313F4F2DBF5120A6B6A9E5E9B68075477AF845081CCD2FA2F1254E88EC94044D3BAF
MD5 SHA1 SHA512 TLSH

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nsg9ED7.tmp\ioSpecial.ini
Size 1KB
SHA256 97591e492cb01788e00e63dda0ce223fb814020500dcea13e51ea330e382d5cc
MD5 5f424adb941e888fbe4f053e7015c298
SHA1 8762a399d1dc836ea2cb25b46bd06d8d9fb1e370
SHA512 e2bbf4a38545033dc4bbe5fd4979162bf245392e26ab7055a4e361a3a2ef94bf85764aebc43993f64e6fa99ea172343faaa07342258b941de28685f912e563c6
TLSH
T18E316C4F1DBF5520A6B6A9E5E9B28035573AF845081CCD1FA2E1250E88EDD4048D3BAF
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads