Overview
overview
3Static
static
3a59f5f34d6...14.exe
windows10-2004-x64
3a59f5f34d6...14.exe
windows11-ltsc_2024-x64
3$PLUGINSDI...ol.dll
windows10-2004-x64
3$PLUGINSDI...ol.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...is.dll
windows10-2004-x64
3$PLUGINSDI...is.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...nt.rtf
windows10-2004-x64
1$PLUGINSDI...nt.rtf
windows11-ltsc_2024-x64
1$PLUGINSDI...60.rtf
windows10-2004-x64
1$PLUGINSDI...60.rtf
windows11-ltsc_2024-x64
1$PLUGINSDI...na.rtf
windows10-2004-x64
1$PLUGINSDI...na.rtf
windows11-ltsc_2024-x64
1$PLUGINSDI...lx.rtf
windows10-2004-x64
1$PLUGINSDI...lx.rtf
windows11-ltsc_2024-x64
1$PLUGINSDI...ea.rtf
windows10-2004-x64
1$PLUGINSDI...ea.rtf
windows11-ltsc_2024-x64
1Analysis
- max time kernel
150s - max time network
133s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
15/08/2026, 16:25
Static task
static1
Behavioral task
behavioral1
Sample
a59f5f34d631a61944239e238edbfd45810000ec494995b7357819de923f6314.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
a59f5f34d631a61944239e238edbfd45810000ec494995b7357819de923f6314.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/AccessControl.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/AccessControl.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/JxNsis.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/JxNsis.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/setupdll.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/setupdll.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/uires/rtf/agreement.rtf
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/uires/rtf/agreement.rtf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/uires/rtf/agreement360.rtf
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/uires/rtf/agreement360.rtf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/uires/rtf/agreementchina.rtf
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/uires/rtf/agreementchina.rtf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/uires/rtf/agreementlx.rtf
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/uires/rtf/agreementlx.rtf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/uires/rtf/agreementoversea.rtf
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/uires/rtf/agreementoversea.rtf
Resource
win11ltsc2024-20260709-en
General
- Target a59f5f34d631a61944239e238edbfd45810000ec494995b7357819de923f6314.exe
- Size 3.4MB
- Sample260815-txem3adr5s
- SHA256 a59f5f34d631a61944239e238edbfd45810000ec494995b7357819de923f6314
- MD5 7046a18b3c73184704ec994cef60e57c
- SHA1 c1ad1c96cd934fa3499aaf6155ac38862abbad35
- SHA512 7a87ccd4bb60189f56ba79b62746f45b17ebb74fb863432caf09458858d9c4e4133cda289fdc596d365f44355ccf6efa6736d87678c1f6cfe19db25146a3c837
- SSDEEP 98304:GQQyPnsfMOPkyi2w6lzLaV9DFZu5Ms8IRR6q5Vg+ZrgohO9k:GQQyPAP3i2wczaxu52Iz6q5Vg82O
- TLSH T1E5F5238AE2D6A484CC1647761CDEC7691750FD0F2A70CAAE327C7E5BFB31AD1E990424
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language a59f5f34d631a61944239e238edbfd45810000ec494995b7357819de923f6314.exe