b3d8d66cf902aa6eb3b7faca617d8bdb7753212b791076e7fdd1929328c98c74

Resubmissions

06/08/2026, 15:04

260806-sfl55sae45

06/08/2026, 14:06

260806-redxpsxvb18

Analysis

max time kernel
202s
max time network
136s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/08/2026, 14:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
emissor.exe
Size 96.5MB
Sample260806-redxpsxvb1
SHA256 b3d8d66cf902aa6eb3b7faca617d8bdb7753212b791076e7fdd1929328c98c74
MD5 d44572c1605f78bfb9810c3f08082992
SHA1 193c3c0053e2fde7ee2e5a8076765c7a16155ee2
SHA512 0cde63cf93f30495848d890902221b081c79880658f106a1f69c18aa7eb2745868b06cd29bda0bb819b987f5318ddbaac2032b96ed716632cfe7be3ae5135ddc
SSDEEP 3145728:K2xux3SXNkZFK3PY7x5rrEnER5MUIxDestaa+gg:Ox3zISMELM/xT7g
TLSH
T1B728338CC8A41ACED93FBC358BB11A48949557B7F2978C37FB001785DEE62C9847C49A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 2 IoCs

pid	Process
2472	emissor.exe
2472	emissor.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	emissor.exe

C:\Users\Admin\AppData\Local\Temp\emissor.exe
"C:\Users\Admin\AppData\Local\Temp\emissor.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:2472

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsp4E08.tmp\System.dll
Size 12KB
SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
MD5 cff85c549d536f651d4fb8387f1976f2
SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
TLSH
T126426B129BB089F2F591583814667F2A6FBE9C5D27F50563CFE304D63D212CB983A283
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsDialogs.dll

Path C:\Users\Admin\AppData\Local\Temp\nsp4E08.tmp\nsDialogs.dll
Size 9KB
SHA256 56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2
MD5 6c3f8c94d0727894d706940a8a980543
SHA1 0d1bcad901be377f38d579aafc0c41c0ef8dcefd
SHA512 2094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355
SSDEEP 96:o0svUu3Uy+sytcS8176b+XR8pCHFcMcxSgB5PKtAtgt+Nt+rnt3DVEB3YcNqkzfS:o0svWyNO81b8pCHFcM0PuAgkOyuIFc
TLSH
T17012F992E6A450B3C5D6533B35AA2F2DCBBD5325B0926C00C7738E4D39395B66E38353
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ADDITIONAL_LICENSE_INFO

Path C:\Users\Admin\AppData\Roaming\emissor_acdigital\jfx\legal\javafx.media\ADDITIONAL_LICENSE_INFO
Size 2KB
SHA256 a69bce275ba7a3570af6579cb0f55682cd75fedfcd49e0e8e9022270c447c916
MD5 71bb3ad0017bf36d14bb96a8d4b32c45
SHA1 1a5c553e71bdb7d94995b206bc9eaa49abd1e888
SHA512 9f658dfea71bdc3cc1549edfb5ad3171dbfa0082b2d91e820c09abe0b376b6bcd8b5170442a5e25e72274e98f130176bbdecfa7997c59705782b214f02136a20
TLSH
T129413262958513731BD200EA2E1C58DEB29D65BCB3190960B8D9C15D335E826C7BF3EE
MD5 SHA1 SHA512 TLSH

Submit Download

ASSEMBLY_EXCEPTION

Path C:\Users\Admin\AppData\Roaming\emissor_acdigital\jfx\legal\javafx.media\ASSEMBLY_EXCEPTION
Size 1KB
SHA256 a44eb7b5caf5534c6ef536b21edb40b4d6babf91bf97d9d45596868618b2c6fb
MD5 d94f7c92ff61c5d3f8e9433f76e39f74
SHA1 7a9b074ca8d783dbe5310ecc22f5538b65cc918e
SHA512 d4044f6ceb094753075036920c0669631f4d3c13203caf2bea345e2cc4094905719732010bbe1cae97bc78743aa6def7c2aa33f3e8fca9971f2ca0457837d3b0
TLSH
T1F7311F3AC2441A7346C314625E1825DAE39F5C2D3F900570B85CC2CD1695A35E33B7E7
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\emissor_acdigital\jfx\legal\javafx.media\LICENSE
Size 18KB
SHA256 4b9abebc4338048a7c2dc184e9f800deb349366bdf28eb23c2677a77b4c87726
MD5 3e0b59f8fac05c3c03d4a26bbda13f8f
SHA1 a4fb972c240d89131ee9e16b845cd302e0ecb05f
SHA512 6732288c682a39ed9edf11a151f6f48e742696f4a762c0c7d8872b99b9f6d5ab6c305064d4910b1a254862a873129f11fd0fa56ff11bc577d29303f4fb492673
SSDEEP 384:sY2fSz/rGvS/66YsaZdIP3Lf4vAkMVhPGkupdDdicW:7vuvVmjkbylupdDdiZ
TLSH
T10182A62F770503F205C302A16A4F68DBA32BD5B9722E11646859C19D236FE35C3BFAD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ADDITIONAL_LICENSE_INFO

Path C:\Users\Admin\AppData\Roaming\emissor_acdigital\jre\legal\java.logging\ADDITIONAL_LICENSE_INFO
Size 48B
SHA256 31cf9d68e91f003b1d332f2a7517c3439e1a6571ff9dc4b740122a53cdcd4f5d
MD5 77ab7d887e438b9c23ec99a3aaeda368
SHA1 5b800f4216048b3210a8f4cb52b54ce9b71bd6e0
SHA512 f21fe8675e34cadb0a25b42c9f9af11f0b39ddd5c57a4665c5b95dc9a2d9218e2ddf7a0b78065b1323e7852bdee8673a8eaeb02779ceb8b49eb2cae9526d14d8
MD5 SHA1 SHA512

Submit Download

ASSEMBLY_EXCEPTION

Path C:\Users\Admin\AppData\Roaming\emissor_acdigital\jre\legal\java.logging\ASSEMBLY_EXCEPTION
Size 43B
SHA256 619a29daab4a59e606c31d43bbd3c80dae8cc496559b353b74d85bea91f134ba
MD5 0ae983b6ba84e6540a401269654c2d31
SHA1 5388d818702aa381c6766e7286773b5e9336c365
SHA512 69a547c7cc1361f371233b27f077ce34d223ada90b80317db14e5a94a6842e890c1e1457cbd331d5c4e45f285a0a8df0565e4c8877c08e937e8e747032192528
MD5 SHA1 SHA512

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\emissor_acdigital\jre\legal\java.logging\LICENSE
Size 32B
SHA256 9e4ffc186121534972af9be8632e57b2b2f3cf203a10f2205e5814120f2b5bfb
MD5 fb33c32dc15849c234e75268da1409fe
SHA1 1b42357a38d059e175584b63312a0a751a704c55
SHA512 8132414a6088a5a29e3cc139bbc10ec3b8fec96b6fd14acae5d64a607a6ff7e10ddc0f6d0560280ffc1432d865d5144347b8d2dd8b25a99dac3c7338c74be3cc
MD5 SHA1 SHA512

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads