Analysis
- max time kernel
149s - max time network
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
- submitted
09/08/2026, 14:53
General
- Target d1e890ab4efa4dca734c9e4190e93f5f43a77e86a2c8a195a2dc3a5da0522b8a.exe
- Size 8.2MB
- Sample260809-r9d6ysba22
- SHA256 d1e890ab4efa4dca734c9e4190e93f5f43a77e86a2c8a195a2dc3a5da0522b8a
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
- Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d1e890ab4efa4dca734c9e4190e93f5f43a77e86a2c8a195a2dc3a5da0522b8a.exe"C:\Users\Admin\AppData\Local\Temp\d1e890ab4efa4dca734c9e4190e93f5f43a77e86a2c8a195a2dc3a5da0522b8a.exe"1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
Flash10i.ocx
settings.sxx
memory/924-7-0x0000000003430000-0x0000000003431000-memory.dmp
memory/924-56-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-57-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-58-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-59-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-60-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-62-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-63-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-65-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-68-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-66-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-67-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-77-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-79-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-82-0x0000000003430000-0x0000000003431000-memory.dmp
memory/924-80-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-86-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-91-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-93-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-94-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-109-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-92-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-114-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-130-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-125-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-135-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-140-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-145-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-164-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-168-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-183-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-200-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-210-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-212-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-224-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-386-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-401-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-400-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-399-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-398-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-397-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-396-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-395-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-394-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-393-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-392-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-391-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-390-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-389-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-388-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-384-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-355-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-313-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-297-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-295-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-267-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-262-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-234-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-223-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-229-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-222-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-221-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-220-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-219-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-218-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-217-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-216-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-215-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-211-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-214-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-209-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-208-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-204-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-201-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-207-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-206-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-198-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-197-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-188-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-187-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-186-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-185-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-192-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-191-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-190-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-179-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-178-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-174-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-184-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-171-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-177-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-1640-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-176-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-175-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-173-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-172-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-167-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-166-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-165-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-155-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-154-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-153-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-146-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-150-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-149-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-148-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-141-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-144-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-143-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-139-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-137-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-132-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-134-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-131-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-129-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-128-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-124-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-127-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-126-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-121-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-113-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-87-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-89-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-84-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-81-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-2255-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-2776-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-2777-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-2890-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-2891-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-2892-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-2893-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-2894-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-2895-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-2896-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-2897-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-2898-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-2899-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-2900-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-2901-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-2902-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-2904-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-2903-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-2906-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-2905-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-2908-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-2907-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-2909-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-2910-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-2912-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-2911-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-2913-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-2914-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-2915-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-2916-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-2917-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-2918-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-2920-0x0000000007940000-0x0000000007B40000-memory.dmp
memory/924-2919-0x0000000006EA0000-0x00000000070A0000-memory.dmp
memory/924-2921-0x0000000006EA0000-0x00000000070A0000-memory.dmp