f12316bceefbabe45f8279bd5a9d6e8e815a9f76114097991548ca7e259f6472

Analysis

max time kernel
150s
max time network
134s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/08/2026, 01:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
hrisitosense.exe
Size 12.8MB
Sample260806-bfgf8afa38
SHA256 f12316bceefbabe45f8279bd5a9d6e8e815a9f76114097991548ca7e259f6472
MD5 3a91c400d62443769a506d8f77c51a10
SHA1 e6d4b5abe0c4cd24ab41365402c2c02a09a7b0d5
SHA512 d285ef5ceb012ef750e9513a582f587ad0614e12594aff9fb7ab18fb6cba1a8fc4db54e9e57765c3f675c5810d484981c585a7e04a97425090e79c9b13334bd3
SSDEEP 393216:Lc5wGfq8rn2lcSqC5Lw/c0ZXsQF9DSvrj3n3EmRhXaoSwmp4uD:ryqCcAC5Lw/c0Z8vXn3vaovmquD
TLSH
T103D633130850B5A5F0911C7A929478D429173E672D3AF9AB0F05EAF2B7766C2FF1270B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/1432-0-0x00000000008F0000-0x0000000001C67000-memory.dmp	upx

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	hrisitosense.exe

C:\Users\Admin\AppData\Local\Temp\hrisitosense.exe
"C:\Users\Admin\AppData\Local\Temp\hrisitosense.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1432

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1432-0-0x00000000008F0000-0x0000000001C67000-memory.dmp

Download

memory/1432-1-0x00000000008F0000-0x0000000001C67000-memory.dmp