Analysis
- user interaction
yes - max time kernel
150s - max time network
152s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
08/08/2026, 18:45
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Creative EAX Setting.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target Creative EAX Setting.exe
- Size 2.6MB
- Sample260808-xecmjafa86
- SHA256 c570ce9209dd54f4dd33ab7aaf8a3db4824f9a0ba69c90704b0fd3ce8b06ebd9
- MD5 94e77f2c413af9d2ea24e7ac7ecd18b1
- SHA1 30d8b33a12a1878515f3beb00bec493ce4f64231
- SHA512 354b93b60211140424dd61dc0afc63d995c10cce607439ae62946253de048727c1a0f1e91b7f771f116f3245efddb3f8bbfadf749244e78bfcf521555ed9bcc9
- SSDEEP 49152:UuKhkAIKyo+HgbY8DkRmaZ8V7Fy1ti1Rm:UtiA7yB4Oi3m
- TLSH T158C53B147ED4EB27C16BCE33D5D24011E3F1E5A32AB1EB0E66D79798184234678863AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
pid Process 1728 Creative EAX Setting.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Creative EAX Setting.exe - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS Creative EAX Setting.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer Creative EAX Setting.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemVersion Creative EAX Setting.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\CreativeEAXSetting\VoicemeeterRemote.dll
- Size 156KB
- SHA256 5d85a8e00c714a707a65671936fb49611f4e7751a9065c618804ed5ca47872cb
- MD5 79b4ef6b17d0a8bb825437773c1d8e3f
- SHA1 255fbeb8ad45faad93afeac2afa2cb7e7d78d079
- SHA512 0c76b45b3c311f34de0087755d63e7966edf24ad77360897475854ff66421ce55e93f35a78ea10f15cce8ccc505618d12dd6114eabc89b73a1e468f5b16799f9
- SSDEEP 3072:+cvA+X1yaikOLqMvbJl1rvVygoP5UG7GjSVX:PYH1rtyrQjS5
- TLSH T1E6F3AF1376D240F6D5813EBD14E7373BEF3AAA5648668E438B98DD521C31352BB2620F
- MD5 SHA1 SHA512 SSDEEP TLSH