8171aff1be7bb0b8b3eab7627ee41b45928893a581315fe3c08254fe5e8a57f0

Analysis

max time kernel
150s
max time network
164s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/08/2026, 16:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Ace_Stream_Media_3.2.8.exe
Size 175.8MB
Sample260815-thttfazbpe
SHA256 8171aff1be7bb0b8b3eab7627ee41b45928893a581315fe3c08254fe5e8a57f0
MD5 e1b167fb74b9557b3f06234c9066d78e
SHA1 ac1ae50d8c507e98238d77786183946e21c134e2
SHA512 8125e6ebcf54b54fcd371e473d55cd7441839c1d54b091f684007d2de1c88f2164ca37bcaddd8698225ba5053bff3e9f5e894be424660104cf2bf2a880ced9dd
SSDEEP 3145728:adHfZBXMbCiN7chkNKjYvSSc04zijBMkksakmvS7aB4XDiyEb9nvm:adHka+KjYvZArZBWDiyA9O
TLSH
T16B98331126917895C3E8B87F12DF107D3EEE1B1ED7E5A72B8711B4E68E35B0B1A98430
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 3 IoCs

pid	Process
4176	Ace_Stream_Media_3.2.8.exe
4176	Ace_Stream_Media_3.2.8.exe
4176	Ace_Stream_Media_3.2.8.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Ace_Stream_Media_3.2.8.exe

C:\Users\Admin\AppData\Local\Temp\Ace_Stream_Media_3.2.8.exe
"C:\Users\Admin\AppData\Local\Temp\Ace_Stream_Media_3.2.8.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:4176

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4780

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

InstallOptions.dll

Path C:\Users\Admin\AppData\Local\Temp\nsv83AE.tmp\InstallOptions.dll
Size 14KB
SHA256 31944b93e44301974d9c6f810d2da792e34a53dcacd619a08cb0385ac59e513d
MD5 5f35212d7e90ee622b10be39b09bd270
SHA1 c4bc9593902adf6daaef37e456dc6100d50d0925
SHA512 7514810367f56d994c6d5703b56ac16124fab5dfdcfbe337d4413274c1ff9037a2ee623e49ab2fb6227412ab29fcc49a3ada1391910d44c2b5de0adeb3e7c2f0
SSDEEP 192:E4n3T5aK+dHCMR1aQR9RuZl3WWmU7WYZsw1JpVGnrjaK72dwF7dBOne:tn3T5KdHCMRD/R1cOnrja+BO
TLSH
T187622B55738488F3DBE2003E785237079B995565B4929ED2CA275FC6687B08D7EB2303
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LangDLL.dll

Path C:\Users\Admin\AppData\Local\Temp\nsv83AE.tmp\LangDLL.dll
Size 5KB
SHA256 b60aec1c8956d2140fc1539f216768913f39f5731d708b0e060851823b4ff319
MD5 9648b84aec426c8426e8312b73956216
SHA1 9105d2ac9b9d627c1f77708ee3efd2e8760572ca
SHA512 0d4a2ce9d01f922d7913606b33ebb5d7be91acff5d8f295d683162f80d19e7bf7a0ec9b5c464b6b25ac265bc6e198857b2e34d671bfbfbe3754116a9e57de302
SSDEEP 48:im1HfEhqneMPUptuMMNvimk2BAZuMTRCpYEvJdUJvR0Ja2of5dwe:F1HLpl9NLBAZuYtR0gjd
TLSH
T1F1C18437A3C246F5E6948233265363C35713A9747766804FCB6712BA1A208B79D2EB83
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsv83AE.tmp\System.dll
Size 11KB
SHA256 6fcea34c8666b06368379c6c402b5321202c11b00889401c743fb96c516c679e
MD5 fccff8cb7a1067e23fd2e2b63971a8e1
SHA1 30e2a9e137c1223a78a0f7b0bf96a1c361976d91
SHA512 f4335e84e6f8d70e462a22f1c93d2998673a7616c868177cac3e8784a3be1d7d0bb96f2583fa0ed82f4f2b6b8f5d9b33521c279a42e055d80a94b4f3f1791e0c
SSDEEP 192:xPtkiQJr7V9r3HcU17S8g1w5xzWxy6j2V7i77blbTc4v:g7VpNo8gmOyRsVc4
TLSH
T116326D5503504AF3E996863C00263B7FAF796A2095F14D53CFA394C0FE2E5C9AD38352
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

custom.ini

Path C:\Users\Admin\AppData\Local\Temp\nsv83AE.tmp\custom.ini
Size 382B
SHA256 4bf80d252359bf367a1d90aa6d989bb206d6d4a02592f8b37072d27d52beef70
MD5 2c9dbe2115874e70d43af406a9805782
SHA1 2f8b2cfa7cacc824bd8c474c7ed5c330b781f728
SHA512 8fb3ba88305c5a1187e736d896fc3bc966aa9c5a295c430b046b566059d291b13081df7b5af01c434f1f9bfec5aa5cd70bf06d4d8978dc1cb5a05195066c456d
TLSH
T118E048CC50048265C431D5596C277AA567D135344B0638F8F5FF0C97E76DCD658DC686
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads