b1ea4008821bc42fe77bb031f8886f8b87a5bd4a4c90f3811cc0550f8e26b212

Analysis

user interaction
yes
max time kernel
86s
max time network
88s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/08/2026, 08:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
driver.exe
Size 2.2MB
Sample260809-jzjppatdpg
SHA256 b1ea4008821bc42fe77bb031f8886f8b87a5bd4a4c90f3811cc0550f8e26b212
MD5 4985479f99f0af25c5b4c28791535494
SHA1 6955d89423b0d3031c36e6d7a22630aafe76248e
SHA512 dfc4bae8af076c5b4b17a5a6608d6663641fc74ddffc4172b0d2562c9806a603468a7f8b6878af8e5bab864efd3f2ea4f686012812028b122bb7608cbe16a84a
SSDEEP 24576:T+qpaFJtN55bXDUWLtCOd9AxQqEPLKnmM1vuO26dzLkGWH6pbjlQZ9+mCAxWgemy:tO7NbTHdAFEzXMRuO21x6IqmTJUX89Xu
TLSH
T11FB52312B3C3D176E6984534CA5AC0F86F177DA414E1501B3EB8FE0FBA7E283587AA51
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery installer

Malware Config

Signatures

Executes dropped EXE 2 IoCs

pid	Process
3328	driver.tmp
3704	OemDrv.exe

Loads dropped DLL 1 IoCs

pid	Process
3328	driver.tmp

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Redragon M731\skins\is-AK3NJ.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-H7TEO.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\mouse\is-1GLGU.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\is-HQ1QM.tmp	driver.tmp
File opened for modification	C:\Program Files (x86)\Redragon M731\unins000.dat	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-O99JS.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-15CTO.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\mouse\is-NOJ81.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\mouse\is-RCN2B.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-VLG06.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-D27DH.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-NDIH6.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\mouse\is-4STVK.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\mouse\is-LQHN7.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\is-HUFIM.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-MM43Q.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-4K2RV.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-J6KB9.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-LG8V5.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-VPFIU.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-1SQJD.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-QPOS8.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\mouse\is-NNEVH.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-84MFJ.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\unins000.dat	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-BM29U.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-64ONM.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-2NR4I.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\mouse\is-KDH6A.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\is-B9FTM.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-B8OPU.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-243TD.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-LPO3I.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-IUTRK.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-OD7M7.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-UPVCD.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\is-CQRJU.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-P54AJ.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-S8VVF.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-A806Q.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-L8GNS.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\is-PR4A5.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-ARNU3.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-L08U4.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-3IV68.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-KVJJ4.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-U80EP.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-0H0MJ.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\mouse\is-C1IO6.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\is-LTEHL.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-UVUL2.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-C2PDV.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\mouse\is-LA53M.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-SPLK9.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-71EAA.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-J419G.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-MVAHK.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-42HU1.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-7SSHC.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-RPU3P.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\mouse\is-7GA60.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-E773I.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-6D5DK.tmp	driver.tmp
File created	C:\Program Files (x86)\Redragon M731\skins\is-3583P.tmp	driver.tmp

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	driver.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	driver.tmp
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	OemDrv.exe

Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral1/memory/5852-0-0x0000000000400000-0x0000000000440000-memory.dmp	innosetup
behavioral1/memory/5852-16-0x0000000000400000-0x0000000000440000-memory.dmp	innosetup
behavioral1/memory/5852-246-0x0000000000400000-0x0000000000440000-memory.dmp	innosetup

Suspicious use of FindShellTrayWindow 4 IoCs

pid	Process
3704	OemDrv.exe
3704	OemDrv.exe
3704	OemDrv.exe
3704	OemDrv.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3704	OemDrv.exe
3704	OemDrv.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 5852 wrote to memory of 3328	5852	driver.exe	89
PID 3328 wrote to memory of 3704	3328	driver.tmp	92

C:\Users\Admin\AppData\Local\Temp\driver.exe
"C:\Users\Admin\AppData\Local\Temp\driver.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:5852
- C:\Users\Admin\AppData\Local\Temp\is-LPTCS.tmp\driver.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-LPTCS.tmp\driver.tmp" /SL5="$501AA,1914412,213504,C:\Users\Admin\AppData\Local\Temp\driver.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:3328
- - C:\Program Files (x86)\Redragon M731\OemDrv.exe
    "C:\Program Files (x86)\Redragon M731\OemDrv.exe"
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SetWindowsHookEx
    PID:3704

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

OemDrv.exe

Path C:\Program Files (x86)\Redragon M731\OemDrv.exe
Size 2.4MB
SHA256 62ac35b834c28e6338a9b028442fd9a2ab2566ee6a0ef7a79ef5f7d847e30377
MD5 db74cac4b5fbe37068cca000d5055126
SHA1 2536a185ddca091139e4c2b614f8e88c1f221465
SHA512 c69c36b09880263341bbedadcb0d32c705ed510138d463ba00524dbb4867ee0b03141f5a5254f6912cc2f6054d8d0790192bb523080a4d5aeb16d8416ac3feea
SSDEEP 49152:yFhIBeN0oovKQZRLNQoLtAP7mzjpqD2w9BT4cAudA2i7uwSZ:yod35BAjmzjpW2ap4TudA2Y
TLSH
T121B58D11BB838175D6B33A36415E633AE1BEAAB00B3546CB66901F3D6D30583A93D71F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

appico.ico

Path C:\Program Files (x86)\Redragon M731\appico.ico
Size 75KB
SHA256 198d4e89686b1ee8cd23d602229ef31360c5eb5f134969d9a5b7ac083169aa19
MD5 48efe97d816ae6891677650449a2376a
SHA1 98ffc564c750b4432810c4f568113b49b2e57647
SHA512 1755b3d1d5d25f68fa1ed31d08fb644f58cb62a28d89717b47c5cf79f2aadaff24344a76064819f043d9a2320cebfa3bb65446ef78a97c43e8da0d4880a5f5ae
SSDEEP 768:dq6akykD4n9goikmihx4mfLMu/fr8kue0qXuG66oggKOisjpePp+Auk05ElqMn4B:ojiTihx4mjMuQ80qXuGUggKnLA2w/
TLSH
T15973F64176C7E822CBD8B138CB09C5F72317BE498A26A6573BB4BF273A7B3032555211
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cfg.ini

Path C:\Program Files (x86)\Redragon M731\cfg.ini
Size 1KB
SHA256 c030b61b3ada82ce65a222519c60edd597ec44da04c368770f5d5d1779ad6754
MD5 20642d9d0adee7a2bf9e36f8d8369042
SHA1 ac3f2fa8122fbd9eb2e600ccf3c3ed34482b8fa5
SHA512 87074a692fc0defa0231b5ed34355f5092337608d22a4a431f68efc8bf36145a54d1fc4ec8263ceba5a62612a3c61403fc397508c63536522b93d94c9bf99c8a
TLSH
T1EB31ACEAA609AF49C1768326C36524B471FCF4C2A9C5CC01FBA61B9D6E89EDF44C4B05
MD5 SHA1 SHA512 TLSH

Submit Download

button3_nr.png

Path C:\Program Files (x86)\Redragon M731\skins\button3_nr.png
Size 2KB
SHA256 f4fb15dbd1b2d81f6dcb743aa15fdb5e7d4d2d1ba4f70332fe56b91c91340bf9
MD5 b322e69380d5ecdd78f2014085963ba2
SHA1 bcea0b0588230ab103450c61f9cfd06815f8cd5e
SHA512 b641e4bc79132aeabb1ca580655754127136fe8acaccd0037df4f892a51c040da204a4d1986e3571841eff67fec63d3e90d66346b2780557370eb68a0a0581de
TLSH
T1E0515CC89440452F114A06AB397FDD064A1B9AD0935A1E1CAEBE434FCB30D513C757AB
MD5 SHA1 SHA512 TLSH

Submit Download

button3_ov.png

Path C:\Program Files (x86)\Redragon M731\skins\button3_ov.png
Size 2KB
SHA256 99aadf7d23eb5c1d031d53bc26eb12acd67e018ba0454fa936c7f024296086ca
MD5 f12a3ace9d8b3c6f35597c9ed6a60f26
SHA1 7019b95d0de2d3788a85d2798cf6d50fc6c7e0fb
SHA512 263c17581a85d215f5241e36c6f08b943996270ddc234c99950436a4665b36616be7e05d7e29773af9755f8934ac0e84049c718c1fcc5b99cc57c98ab863bc86
TLSH
T1EE514CCD8854491A154D06BF396FED064A3BD6C8836A5E0C9AEE924FD720C613C34B6B
MD5 SHA1 SHA512 TLSH

Submit Download

exit_nr.png

Path C:\Program Files (x86)\Redragon M731\skins\exit_nr.png
Size 360B
SHA256 5872d9e114467983cfbf775e262421f8cdd7f14908b81a169cecf4876f5d1313
MD5 082c84921cbbd8205d3e9262bb9336da
SHA1 0c238c6381da2757f41b78ab0543624b0e0e6d62
SHA512 60ffd4c33f1f73d4d8778610e049e3258ba5416af98de90a8227ecd0af92c9744d89521c5910f2a0e82b5019147183023c66bd0c6545d8d7953592dc3f5663da
TLSH
T1D6E0F1E01207A41DC900603112334220BF179B9C024BEA37D4D1C41046B55FD0BCD712
MD5 SHA1 SHA512 TLSH

Submit Download

exit_ov.png

Path C:\Program Files (x86)\Redragon M731\skins\exit_ov.png
Size 361B
SHA256 686a6c7f26c6a79139eaab6dd6057425dee22bffadcbdf28bc58427594f4c345
MD5 36e95ec376307c65e60b74e571933ac1
SHA1 084817a92171630b437986d198395f04f8741e51
SHA512 7edff7307e984f815a1ae37299ef2dac76cfb7b63afd5b0800afd37c19b4b017536a38d7e2781ad471eb569011b9e5b27d0415d1ca814cbe7d670b84833028e2
TLSH
T1E2E0C0E562F8AD6AE87130725B5B30A8ED41031DD2A7CB10EDF5F06815FBB1C14D0AA2
MD5 SHA1 SHA512 TLSH

Submit Download

mak.skn

Path C:\Program Files (x86)\Redragon M731\skins\mak.skn
Size 520B
SHA256 a82e15342ee27efe792c9e31ede7feae1feb455d5d2a0f6b09cf96991f03e987
MD5 9ff4e75c1927c8aabf24f47bda2f0a7a
SHA1 2c35023c851e678c6b0a41e3d8c2c47765629a98
SHA512 9bfeeaa30faa21e6cfceca0d99e80f8c13634f2d42edb49f4093e7547c334531b0f77d04dfcc0ae320ae8c623dd9ccccf3b2399894e8362d3d115166296ae82b
TLSH
T1F5F005554135D864B27981354D0CA2D4413E81FD7710B4AF5543D93AE481249743697E
MD5 SHA1 SHA512 TLSH

Submit Download

menu_nr.bmp

Path C:\Program Files (x86)\Redragon M731\skins\menu_nr.bmp
Size 12KB
SHA256 ef6c83a74e9fe943725fc90467f18f04669d239555b559fe542c03c15e123fa9
MD5 942f76993b002db74ae453a52b81ef60
SHA1 5c188ed2fdc580d89bc9b3952a3291a5d8900d01
SHA512 32d69a629b03b295bdcf7feada4d5d6cabce6de680111939a7276bdfa7f1a6f4023c4ea16c88c8983fd15a5613021c9257818c27429b1bf0fbe102eb8364de93
SSDEEP 3:zll/l7/+l9/lh/36XtlHtlHtlHtlHtlHtlHtlHtlHtlHtlHtlHtlHtlHtlHtlHtP:rIlfh/6d/n
TLSH
T12B4202546F110080F26CD73414CB9D0D2DF54E65D47493428B9212E0455715C6D3C7D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

menu_ov.bmp

Path C:\Program Files (x86)\Redragon M731\skins\menu_ov.bmp
Size 12KB
SHA256 0e29f9d1d7e51860034c8804b9dde9602ba00aaa1d4ed8276883476749774d86
MD5 8f80beb73cc9afe1b7101a1794b5ff92
SHA1 14702198276d4a3683046668f8d618820eb3cd5f
SHA512 db51e72dc7054b3bc2acf366dd0fb5b149c47ad747b5615f5fdbd084a0d2bd5cfe28ef696b0259a29cf46c2bf453b3a674b04e57602be0d7a2042b717f1a460b
SSDEEP 48:t9K222222222222222222222222222222222222222222222222222222222222G:t9SHu
TLSH
T1F84212087F45C416F7389FF55C9B06487B75A3B7ED57651260DA10B2EBC620D1599208
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

menusub_nr.bmp

Path C:\Program Files (x86)\Redragon M731\skins\menusub_nr.bmp
Size 12KB
SHA256 9cd1e202656de973d6464cf972bfbd70d4d878e0456e2688075f00397d49df20
MD5 b17fe6506c6f4dabb65e2d232b58ea2f
SHA1 d95b5d374dea335709960946279dd5e57d4b6aaf
SHA512 d25513e819c3bf81cfe7e8ee4be30b1b5edf76939b072639b3d31e841649bb36bbab0ed0edebbd7b0f0abfa7e8d9749e431d9295d092a15c269beff431905992
SSDEEP 6:rIlfh/68hzPjEYfjTejY/PjJXjrlwfj5jrlx/tfjJXjzjTejEYfhg/k/n:rwhiGJqQJzZwr9ZZtrJzXq0c
TLSH
T1104253088630F04FED5443BDDC8B54C63AE91242C274EF81F2F968A2184F20834FAAB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

menusub_ov.bmp

Path C:\Program Files (x86)\Redragon M731\skins\menusub_ov.bmp
Size 12KB
SHA256 fbe664a8037aa27aaa17e0b2b59183410452066d3108e6ddc6536f380f801909
MD5 161410bb6161268b7789a7b7a641a4f4
SHA1 8f1e91a384953aac03d311646a3025c9430d3275
SHA512 b46363e6b0a5f072f788ecc8d41d8d05451e19392b27e72565742e05078cd7bd99cf9d7d67d18f46122545f650855a077581d32130a80fce76c93afd33bd0637
SSDEEP 48:t9Nj1LQlObFA222222222222222222222222222222222222222222222222222C:t9Z1iuTHu
TLSH
T1504233047E45D426F6249FB99CEB0784B774B3A7FE5B9512A0DE1072F7C930D119921C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msg_nr.png

Path C:\Program Files (x86)\Redragon M731\skins\msg_nr.png
Size 19KB
SHA256 6a94e6eec03ac4a5f6794596e10304f851ee61fbb0c4479ce61527d2a2c05aa2
MD5 3afc44bcec4a5a389236bc0becb972dc
SHA1 205a9b5bface5a01a6bb4020c6e50f0b71b14f28
SHA512 11e0114657f4a1a9ae27ae365389d7b2cf07f9a46c633bc26c118d79d9b131904f748a158498cdf7934b7dc0e12827b158e40ee3cbe69a1feb45d716c0ab1960
SSDEEP 384:6KnFnRA5WQU3HrArGeCnG0y2Nnm1PXIFy0z6I7uO7/C43a+Czhb:VDAhqaXdU6Ih7/C4u
TLSH
T16D92D07C51CACE8B52D232C8F4D1A9A4A9E9242AB5C19B3FC14E49080E791D5F34DE71
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

text.xml

Path C:\Program Files (x86)\Redragon M731\text.xml
Size 24KB
SHA256 2e1765f1817b5a39662ce7f9d9befbadde70d1e11d1499183b5ea95249d61fb2
MD5 ae951e19c20a6a876e5ce423bdeafb82
SHA1 4f5e74cab875b6a9287ce9202d09e43c47105b6d
SHA512 5d3bb23291fbb20ce56d6ec68dd8d02df6e40fe58c977c82dc00f93bce80598638a45851f1250ef7bae451362d471f4dcf2c43fa8ef839c65765337b8dcc9eb9
SSDEEP 192:t8bPG760TxylUXIEWvz6PkUaCqGuoZ7Es32twvIxe2Vv1VFOekj9:Gbk60sy0z6P1Zx2KeeK1VFOvj9
TLSH
T1D8B2EF0B23EE0154B1B2BD592A7554698F25B8D1592DCC2C06F9104FC8E3E60BEF6BE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InitSetup.dll

Path C:\Users\Admin\AppData\Local\Temp\is-E7OM8.tmp\InitSetup.dll
Size 67KB
SHA256 59db7bfd9a92cc9a0998260807f17c536ec71159b727df10d08b998bc94de301
MD5 eb789d46ab0ec0b3558bfd285f5e0156
SHA1 a4d3c83b4b5669d197caffaf163c9e3ae3382e2c
SHA512 4791a8d76c5b25ee2de417eee4dc761127c2991d734447bda49f764b65e30e85ee7f694e6f8984080f9dbc619c479fea813b824e9d1760039541a01151f75c96
SSDEEP 768:Xf+qhvj1L2LsDAtFrhTjK91Lj7TLzFfAVhgOO13bnDL5OHmmHZ62EA:P+yZL24D+nKbDHzFfT3z5OHmmHZ62
TLSH
T1A5637B517910C032C946A9386499C6B25E7D7D312BF5C4C33FAA07698FA13D2B73A39B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

driver.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-LPTCS.tmp\driver.tmp
Size 1.2MB
SHA256 79b327db4ad8e17493570635de727d7171008e14249c075d48acbb420a492df0
MD5 846c994f81b34d45e595ecffdeb25619
SHA1 c2aaa8d2f777711ebcc1b73be0ecaa5efbe9c6d2
SHA512 7aff5efbd0835d1a779889353ae74462474037c3688530b5b406c79137f38074e49779208e1acf1e0c0d8a15ac313d8191f3f3888d2a9c3eadeecf53f91f83b7
SSDEEP 24576:ag4CPlHDJpAABVPuUXRlsEaD21ypxJj/HehNDjB/6xPqMUroC8qPx9eW:l/BJpAOVmkl5YpKN6JiR
TLSH
T187454B12A3D28437D1732F758D2BC6D45C22BD252E74A98B3EF8AE0D1E39B417935392
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/3328-9-0x0000000000400000-0x0000000000548000-memory.dmp

Download

memory/3328-15-0x0000000000400000-0x0000000000548000-memory.dmp

Download

memory/3328-215-0x0000000000400000-0x0000000000548000-memory.dmp

Download

memory/3328-235-0x0000000000400000-0x0000000000548000-memory.dmp

Download

memory/3328-8-0x0000000000400000-0x0000000000548000-memory.dmp

Download

memory/3328-244-0x0000000000400000-0x0000000000548000-memory.dmp

Download

memory/5852-2-0x000000000041E000-0x000000000041F000-memory.dmp

Download

memory/5852-16-0x0000000000400000-0x0000000000440000-memory.dmp

Download

memory/5852-246-0x0000000000400000-0x0000000000440000-memory.dmp

Download

memory/5852-0-0x0000000000400000-0x0000000000440000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads