ca73ce96a1c88044bbc047227937ddcf680b373d1dd006914ff3383689373f31

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/08/2026, 10:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ca73ce96a1c88044bbc047227937ddcf680b373d1dd006914ff3383689373f31.exe
Size 5.5MB
Sample260810-mc4ccsfl5v
SHA256 ca73ce96a1c88044bbc047227937ddcf680b373d1dd006914ff3383689373f31
MD5 60d2ea9a34db4c86b4ae2ae2ff463e7d
SHA1 a53310a80e87dcf7018123398562ebbb81d35570
SHA512 c69b241cb43dc21ad60c64a6504473d900ac80436b8a0afe3f6449eb095de74122b83f184cc8bf315d58564850144d6fa9a6b4fe5820ee073612e5ea7aea31a3
SSDEEP 98304:LuWG4vwRetZ/8ulewYKMbzq8+rUUGCGpP5O41P5Trz33ybRU8Mw9yNJNnLJKWHCz:LVwRetZ/8uYwYKGzqvUUD2VP93nqAPlu
TLSH
T1A3463312F9C09870D669143689E0ABA516A97E359FD4E98BB7483B1D7D730C09B30FB2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Program Files directory 6 IoCs

description	ioc	Process
File opened for modification	C:\Program Files (x86)\IObit	ca73ce96a1c88044bbc047227937ddcf680b373d1dd006914ff3383689373f31.exe
File opened for modification	C:\Program Files (x86)\IObit\Driver Booster	ca73ce96a1c88044bbc047227937ddcf680b373d1dd006914ff3383689373f31.exe
File opened for modification	C:\Program Files (x86)\IObit\Driver Booster\13.6.0	ca73ce96a1c88044bbc047227937ddcf680b373d1dd006914ff3383689373f31.exe
File created	C:\Program Files (x86)\IObit\Driver Booster\13.6.0\__tmp_rar_sfx_access_check_240735765	ca73ce96a1c88044bbc047227937ddcf680b373d1dd006914ff3383689373f31.exe
File created	C:\Program Files (x86)\IObit\Driver Booster\13.6.0\version.dll	ca73ce96a1c88044bbc047227937ddcf680b373d1dd006914ff3383689373f31.exe
File opened for modification	C:\Program Files (x86)\IObit\Driver Booster\13.6.0\version.dll	ca73ce96a1c88044bbc047227937ddcf680b373d1dd006914ff3383689373f31.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ca73ce96a1c88044bbc047227937ddcf680b373d1dd006914ff3383689373f31.exe

C:\Users\Admin\AppData\Local\Temp\ca73ce96a1c88044bbc047227937ddcf680b373d1dd006914ff3383689373f31.exe
"C:\Users\Admin\AppData\Local\Temp\ca73ce96a1c88044bbc047227937ddcf680b373d1dd006914ff3383689373f31.exe"
1⤵
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
PID:356

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads