Analysis
- user interaction
yes - max time kernel
35s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
11/08/2026, 03:49
General
- Target mmbasic.exe
- Size 3.4MB
- Sample260811-ederds1sds
- SHA256 fddce09702a195c3b25696e560824c83b84637426e0d4e8abfd6a994e056e988
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- UPX packed file 6 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\mmbasic.exe"C:\Users\Admin\AppData\Local\Temp\mmbasic.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\MMANA-GALBasic3\MMANAGALBasic35.exe"C:\MMANA-GALBasic3\MMANAGALBasic35.exe"2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
English.mmn
mmnlanguage.txt
MMANAGALBasic35.exe
memory/3728-0-0x0000000000400000-0x000000000072E000-memory.dmp
memory/3728-1-0x0000000002630000-0x0000000002631000-memory.dmp
memory/3728-15-0x0000000000400000-0x000000000072E000-memory.dmp
memory/3728-17-0x0000000002630000-0x0000000002631000-memory.dmp
memory/3728-16-0x0000000000400000-0x000000000072E000-memory.dmp
memory/3728-18-0x0000000000400000-0x000000000072E000-memory.dmp
memory/3728-1030-0x0000000000400000-0x000000000072E000-memory.dmp
memory/3728-1545-0x0000000000400000-0x000000000072E000-memory.dmp
memory/4208-1544-0x0000000000400000-0x00000000006CD000-memory.dmp
memory/4208-1546-0x0000000002540000-0x00000000025A0000-memory.dmp
memory/4208-1553-0x00000000009F0000-0x00000000009F1000-memory.dmp
memory/4208-1590-0x00000000026D0000-0x00000000026D1000-memory.dmp
memory/4208-1591-0x00000000035E0000-0x00000000035E1000-memory.dmp
memory/4208-1594-0x0000000002540000-0x00000000025A0000-memory.dmp
memory/4208-1593-0x00000000035E0000-0x00000000035E2000-memory.dmp
memory/4208-1592-0x0000000000400000-0x00000000006CD000-memory.dmp
memory/4208-1589-0x00000000035E0000-0x00000000035E1000-memory.dmp
memory/4208-1588-0x0000000002700000-0x0000000002701000-memory.dmp
memory/4208-1587-0x00000000035E0000-0x00000000035E1000-memory.dmp
memory/4208-1586-0x00000000035F0000-0x00000000035F1000-memory.dmp
memory/4208-1585-0x00000000035F0000-0x00000000035F1000-memory.dmp
memory/4208-1584-0x00000000035F0000-0x00000000035F1000-memory.dmp
memory/4208-1583-0x00000000035F0000-0x00000000035F1000-memory.dmp
memory/4208-1579-0x00000000027C0000-0x00000000027C1000-memory.dmp
memory/4208-1578-0x00000000027A0000-0x00000000027A1000-memory.dmp
memory/4208-1576-0x0000000002780000-0x0000000002781000-memory.dmp
memory/4208-1575-0x00000000035E0000-0x00000000035E1000-memory.dmp
memory/4208-1574-0x00000000026B0000-0x00000000026B1000-memory.dmp
memory/4208-1573-0x0000000002710000-0x0000000002711000-memory.dmp
memory/4208-1571-0x00000000026F0000-0x00000000026F1000-memory.dmp
memory/4208-1570-0x00000000026C0000-0x00000000026C1000-memory.dmp
memory/4208-1562-0x00000000035F0000-0x00000000035F1000-memory.dmp
memory/4208-1560-0x00000000035F0000-0x00000000035F1000-memory.dmp
memory/4208-1559-0x00000000035F0000-0x00000000035F1000-memory.dmp
memory/4208-1557-0x00000000035F0000-0x00000000035F1000-memory.dmp
memory/4208-1555-0x0000000000D60000-0x0000000000D61000-memory.dmp
memory/4208-1582-0x00000000035F0000-0x00000000035F1000-memory.dmp
memory/4208-1581-0x00000000035F0000-0x00000000035F1000-memory.dmp
memory/4208-1580-0x0000000002760000-0x0000000002761000-memory.dmp
memory/4208-1577-0x0000000002770000-0x0000000002771000-memory.dmp
memory/4208-1572-0x0000000002740000-0x0000000002741000-memory.dmp
memory/4208-1569-0x00000000035E0000-0x00000000035E1000-memory.dmp
memory/4208-1568-0x00000000035E0000-0x00000000035E1000-memory.dmp
memory/4208-1567-0x00000000035E0000-0x00000000035E1000-memory.dmp
memory/4208-1566-0x00000000035F0000-0x00000000035F1000-memory.dmp
memory/4208-1565-0x00000000035F0000-0x00000000035F1000-memory.dmp
memory/4208-1564-0x00000000035F0000-0x00000000035F1000-memory.dmp
memory/4208-1563-0x00000000035F0000-0x00000000035F1000-memory.dmp
memory/4208-1561-0x00000000035F0000-0x00000000035F1000-memory.dmp
memory/4208-1558-0x00000000035F0000-0x00000000035F1000-memory.dmp
memory/4208-1556-0x00000000035F0000-0x00000000035F1000-memory.dmp
memory/4208-1552-0x0000000000D80000-0x0000000000D81000-memory.dmp
memory/4208-1551-0x0000000000D70000-0x0000000000D71000-memory.dmp
memory/4208-1549-0x0000000000D30000-0x0000000000D31000-memory.dmp
memory/4208-1547-0x0000000000D10000-0x0000000000D11000-memory.dmp
memory/4208-1554-0x00000000035F0000-0x00000000035F1000-memory.dmp
memory/4208-1550-0x0000000000D50000-0x0000000000D51000-memory.dmp
memory/4208-1548-0x0000000000D00000-0x0000000000D01000-memory.dmp
memory/4208-1595-0x00000000035F0000-0x00000000035F1000-memory.dmp
memory/4208-1599-0x00000000009D0000-0x00000000009D1000-memory.dmp
memory/4208-1597-0x00000000035E0000-0x00000000035E1000-memory.dmp
memory/4208-1598-0x00000000009C0000-0x00000000009C1000-memory.dmp
memory/4208-1596-0x00000000035D0000-0x00000000035D3000-memory.dmp
memory/4208-1601-0x0000000000400000-0x00000000006CD000-memory.dmp
memory/4208-1606-0x0000000000400000-0x00000000006CD000-memory.dmp