Analysis
- max time kernel
149s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
09/08/2026, 00:14
Behavioral task
behavioral1
Sample
MUICacheView/App/MUICacheView/MUICacheView.chm
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
MUICacheView/App/MUICacheView/MUICacheView.chm
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
MUICacheView/App/MUICacheView/MUICacheView.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
MUICacheView/App/MUICacheView/MUICacheView.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral5
Sample
MUICacheView/MUICacheViewLKL.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
MUICacheView/MUICacheViewLKL.exe
Resource
win11ltsc2024-20260709-en
General
- Target MUICacheView/App/MUICacheView/MUICacheView.exe
- Size 29KB
- Sample260809-ajjkbaxane
- SHA256 02e28fa849121a1ffce2cccdfaed4974636253c3a8d5f16207d0fd13c0ea72d5
- MD5 e999c811b919c420d5657a484cecdd61
- SHA1 a61ab3db7d9aa92c309956c8a033a7c5ce4edeb9
- SHA512 caeb0693a02154195d2421786a7b39559ac605c06371a8f7ed95535f75296e7f3a99de0a72d9ff7570d4b7d0bd3a2c2bb7ff37813f1fefbc4be1ad792ba41d8a
- SSDEEP 768:Xm/LKD7CbEQJHUDPk77BJKdupd8vl7PbT6z204wwwggAGyN1RGz:qLKD7CQYHUD8hJh6l7X104wwwggAG21E
- TLSH T1C1D2CF03EBA59068CBBDA4B710638F701B16FC3019680F9A36B5769FEC303656D51BE5
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Detected Nirsoft tools 1 IoCs
Free utilities often used by attackers which can steal passwords, product keys, etc.
resource yara_rule behavioral3/memory/3976-2-0x0000000000400000-0x0000000000415000-memory.dmp Nirsoft -
resource yara_rule behavioral3/memory/3976-0-0x0000000000400000-0x0000000000415000-memory.dmp upx behavioral3/memory/3976-2-0x0000000000400000-0x0000000000415000-memory.dmp upx - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language MUICacheView.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3976 MUICacheView.exe