a8859ff9270a725116c8ffbaf934d5d44d786642f99b5c3a26564ce6c9d45f4b

Analysis

max time kernel
148s
max time network
145s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/08/2026, 17:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a8859ff9270a725116c8ffbaf934d5d44d786642f99b5c3a26564ce6c9d45f4b.exe
Size 659KB
Sample260813-vvdtestwhw
SHA256 a8859ff9270a725116c8ffbaf934d5d44d786642f99b5c3a26564ce6c9d45f4b
MD5 d36e41062b9e5fec485401fd72336026
SHA1 8593ccb2eb72908fa114fbe61e190921788fcac5
SHA512 4fcdd7a2070c114fcb436d4a8f92435214b608a31e42a75902146503ccabcccacd3d1cc1d26aefe437221aec8392dcf8f7979065b89d0e26c9bf453f8a4b59a4
SSDEEP 12288:mXRavGpqzkKrEsIr+AFDusStXqtXqXcnGJRZWssBP5aUQzG:mXRavYSkKosIr+Zs/67RIpBh9z
TLSH
T104E4220AB380C45AE47A1A305AFBDAF36676F451A2300F87FF14D3AF9522905DE1EE45
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 5 IoCs

pid	Process
5500	a8859ff9270a725116c8ffbaf934d5d44d786642f99b5c3a26564ce6c9d45f4b.exe
5500	a8859ff9270a725116c8ffbaf934d5d44d786642f99b5c3a26564ce6c9d45f4b.exe
5500	a8859ff9270a725116c8ffbaf934d5d44d786642f99b5c3a26564ce6c9d45f4b.exe
5500	a8859ff9270a725116c8ffbaf934d5d44d786642f99b5c3a26564ce6c9d45f4b.exe
5500	a8859ff9270a725116c8ffbaf934d5d44d786642f99b5c3a26564ce6c9d45f4b.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	a8859ff9270a725116c8ffbaf934d5d44d786642f99b5c3a26564ce6c9d45f4b.exe

C:\Users\Admin\AppData\Local\Temp\a8859ff9270a725116c8ffbaf934d5d44d786642f99b5c3a26564ce6c9d45f4b.exe
"C:\Users\Admin\AppData\Local\Temp\a8859ff9270a725116c8ffbaf934d5d44d786642f99b5c3a26564ce6c9d45f4b.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:5500

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

InstallOptions.dll

Path C:\Users\Admin\AppData\Local\Temp\nsn7D74.tmp\InstallOptions.dll
Size 15KB
SHA256 b2091205e225fc07daf1101218c64ce62a4690cacac9c3d0644d12e93e4c213c
MD5 d095b082b7c5ba4665d40d9c5042af6d
SHA1 2220277304af105ca6c56219f56f04e894b28d27
SHA512 61fb5cf84028437d8a63d0fda53d9fe0f521d8fe04e96853a5b7a22050c4c4fb5528ff0cdbb3ae6bc74a5033563fc417fc7537e4778227c9fd6633ae844c47d9
SSDEEP 192:EyGQtZkTktEQUrJaZfuyCnSmUsv3sY7L7cW8Y6Q86QvoTr11929WtshLAzgSrX8:EyNt+4t7uJalUnGesY7Lt8nCr/Yosa
TLSH
T163624D1137D598B3E2E62A797EF377138FA5F722A4429E0BC7332E4638565806D78311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StartMenu.dll

Path C:\Users\Admin\AppData\Local\Temp\nsn7D74.tmp\StartMenu.dll
Size 7KB
SHA256 110545415a59402635e1c9439acba15b44bab268ed02ad2a262ce12604a47855
MD5 a8c86996c4230c2209f5927f21321377
SHA1 45ce0ab93cb6a3a594e54878cce05df724024393
SHA512 69ee73496b916777936b0dddd2cc4a4f916e393f7d0b167cba77a4a239ee1e3f645d9b90dee1627c42a23eb6c3403e4d086546b9f78b3a2e4999c8f92f6a3bc3
SSDEEP 96:mIt3J2Gl0eVe0+Cfo0UkXt6+o69UiGdPh5/utta/23lkCTcaqHCI:bhE+A0+sF6piUFkAylncviI
TLSH
T154F1C776F3D20673F9AB427428632F231B2AF521576581A6490316CE7A61DE3FD34B11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UserInfo.dll

Path C:\Users\Admin\AppData\Local\Temp\nsn7D74.tmp\UserInfo.dll
Size 4KB
SHA256 4913d4cccf84cd0534069107cff3e8e2f427160cad841547db9019310ac86cc7
MD5 d458b8251443536e4a334147e0170e95
SHA1 ba8d4d580f1bc0bb2eaa8b9b02ee9e91b8b50fc3
SHA512 6ff523a74c3670b8b5cd92f62dcc6ea50b65a5d0d6e67ee1079bdb8a623b27dd10b9036a41aa8ec928200c85323c1a1f3b5c0948b59c0671de183617b65a96b1
TLSH
T18D8173BB93E00CF3D0A44BB740A71CE362B5DD201B62001F4A478EA92590B67EE7E715
MD5 SHA1 SHA512 TLSH

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nsn7D74.tmp\ioSpecial.ini
Size 1KB
SHA256 8586fe062d33cf55c321198c7832fd151ee82b76ea9bafab3c05f886935c6696
MD5 2fef2231395d9541eaaea2bc15821747
SHA1 5834eaa050d7a6b36a78040d06542ba74b820325
SHA512 f8d9af3686a90adb26016cd668ffa3eda8a66b114279803d782b4ee22e2a27e5369c99d7084512ff433052a60c2a7064862a8bf7b1c1da6aa96934d549d422dd
TLSH
T1F8217F437BFC1214F2BBBB14FEB541758B3A7C56A83DD60D81D0090E09E5A508963BAB
MD5 SHA1 SHA512 TLSH

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nsn7D74.tmp\ioSpecial.ini
Size 1KB
SHA256 1fb1dedd0bff62d4253ead1a81edaac2289594ec2918c9c8028722572c5915e1
MD5 52766ff439d221680d19c7c6b593e512
SHA1 1db32d3c595622a59791ba8e20a8e1ce7b5b28ac
SHA512 40e3fae723e5827391fa5b855791316433670cfd86004bdd26625aff18429dcfa0a7badccbf7817fabf2ffc8788248d04f07d411883bc824bfa6536b116f37fe
TLSH
T1FE21AE437AFD0508F2BBBB14FFB441749B3A7C56A83DC90D41C10A0E08E6E408963BAB
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads