Analysis

  • max time kernel
    150s
  • max time network
    154s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    13/08/2026, 06:14

General

  • Target
    MediaGet.exe
  • Size 3.1MB
  • Sample260813-gzbb7sstdz
  • SHA256 1ca62a560ee6885b9c9187ade5c8933ec28a52323ffbc39f8e2ba9c9fb151247
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Program crash 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 4 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\MediaGet.exe
    "C:\Users\Admin\AppData\Local\Temp\MediaGet.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    PID:4632
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -u -p 4632 -s 2224
      2⤵
      • Program crash
      PID:2076
  • C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 4632 -ip 4632
    1⤵
      PID:2368

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          Montserrat-Bold.eot

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\Montserrat-Bold.eot
          • Size 256KB
          • SHA256 7615a4bb88a5680cfead49c1774013ce48c4c7343cb82d7585f7935c705400b0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Montserrat-Regular.eot

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\Montserrat-Regular.eot
          • Size 314KB
          • SHA256 057bc6c47c47aaccdf31adc48a6b401f6090a02c28e354099eff80907dc2af32
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Roboto-Regular.eot

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\Roboto-Regular.eot
          • Size 176KB
          • SHA256 6cedf381d59fa4caabfb836e9a3720420645cbcea32491a5ac5f07cf274ceac6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          av360-check-on.png

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\av360-check-on.png
          • Size 445B
          • SHA256 8b8f0ad0cdf07227f759cb18c64ff64ae72fcbfc7916524acb355d889ddece3f
          • MD5 SHA1 SHA512 TLSH

          av360.png

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\av360.png
          • Size 216KB
          • SHA256 caec781eb9c39273dacfb6227adf6db3927b4c55d7591158fe8101238edb2032
          • MD5 SHA1 SHA512 SSDEEP TLSH

          close-gray.png

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\close-gray.png
          • Size 268B
          • SHA256 9ba220b02676f499296b258227582e7f9347890e530d0e6795aa476150d909c3
          • MD5 SHA1 SHA512 TLSH

          close-lightgray-14px.png

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\close-lightgray-14px.png
          • Size 271B
          • SHA256 2d445a49383ef3d251935caebe0a7b178f0bd69b20e54a44f67394409b6141a7
          • MD5 SHA1 SHA512 TLSH

          close-white.png

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\close-white.png
          • Size 264B
          • SHA256 c1d3c989cfc39531d46e25867e0f15c552688b3fbef8f5bd59dbae303aae9048
          • MD5 SHA1 SHA512 TLSH

          main-logo-white.png

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\main-logo-white.png
          • Size 6KB
          • SHA256 e3990165ef06c69e64a8c8edd9c1a6b109a6f748e5305009e27adbc45cbff656
          • MD5 SHA1 SHA512 SSDEEP TLSH

          opera-check-on.png

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\opera-check-on.png
          • Size 378B
          • SHA256 4fef700a16ebb413d3ecae78ab8d1462a5f916afb4ecc567c8ef300a66aa19ed
          • MD5 SHA1 SHA512 TLSH

          opera-empty.png

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\opera-empty.png
          • Size 107KB
          • SHA256 d163d272e617caf16dca98cf25721b6b78a7a5ec59552af71fb4704758741a14
          • MD5 SHA1 SHA512 SSDEEP TLSH

          point.png

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\point.png
          • Size 159B
          • SHA256 0914121c7693afd3b625929d540acb7942401d6f46736e6cb8bbf59276d7a1b6
          • MD5 SHA1 SHA512 TLSH

          settings-checked.png

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\settings-checked.png
          • Size 382B
          • SHA256 d05f0be137ed891926de83bb83fa46c78d01da09b2fb6d62d1fa7dfb57701229
          • MD5 SHA1 SHA512 TLSH

          soax-mglogo.png

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\soax-mglogo.png
          • Size 4KB
          • SHA256 cce96ae129b268e5a1fed76ce3e2e7e6eb3a5a9c4ba87fd6c22394863a6585e5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          soax-schema.png

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\soax-schema.png
          • Size 2KB
          • SHA256 1398ff3a4bf9bb8011cb5230919bf48f72bdc5f34e3917d773edca3d3a758363
          • MD5 SHA1 SHA512 TLSH

          index.html

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\index.html
          • Size 38KB
          • SHA256 1a7c7401a675c168e190d9bcc87cd16d21c1f41aebbc18409df252a656df144a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          jquery-ui.min.1.8.0.js

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\js\jquery-ui.min.1.8.0.js
          • Size 202KB
          • SHA256 8b59592d67eadc703af6cdd5ba8d077f9f9485d01fb6405555614335f89be99b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          jquery.min.1.6.4.js

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\js\jquery.min.1.6.4.js
          • Size 89KB
          • SHA256 4a62927a380e201c4ee51321dcc1e6b1f7dfbf82049cf349df990629e01e9178
          • MD5 SHA1 SHA512 SSDEEP TLSH

          page-wait.jpg

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\page-wait.jpg
          • Size 14KB
          • SHA256 a885583e65c215880f4448e853b1c966d8cb96e619c26daf095ba3d0789128cd
          • MD5 SHA1 SHA512 SSDEEP TLSH

          preloader.html

          • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\preloader.html
          • Size 266B
          • SHA256 ac071e1f7162b4d4a9a195b52fe138a665af7fc207e39ca5d047338acd6a55b3
          • MD5 SHA1 SHA512 TLSH