f841bd32b70e5df9bcedb886848b68481d56d6c8d044bc8eeb7fb0f4f472d8c1

Analysis

max time kernel
901s
max time network
502s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/08/2026, 13:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Setup.exe
Size 137.1MB
Sample260816-qeptjaydma
SHA256 f841bd32b70e5df9bcedb886848b68481d56d6c8d044bc8eeb7fb0f4f472d8c1
MD5 3c99a3252696a4a019ba5423c94af21f
SHA1 6fd28a7079f338337a2c5dc31149788f47e511aa
SHA512 0421a6018c8fbfcc10702dfc5d251c3587e0607beb1ef7b4ac61aaed8ee0a06702e98dfe14b77f89c52384cd5ebff370bd81ed7ec3a7c43fd7c57e011bd40d25
SSDEEP 3145728:lXP+D0Dl+apQMJgcBllEdoZ57RNnJWxrouaS+TobpuFEaA55P1ly:Nm8+aKMv80597oboFA55dly
TLSH
T1B568339394BB780ADF92AC39DE15817AD590CC3C6E2B6B5B1E15796FB073003F296870
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 4 IoCs

pid	Process
936	Setup.exe
936	Setup.exe
936	Setup.exe
936	Setup.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Setup.exe

C:\Users\Admin\AppData\Local\Temp\Setup.exe
"C:\Users\Admin\AppData\Local\Temp\Setup.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:936

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:2540

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:5028

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsh481D.tmp\System.dll
Size 11KB
SHA256 3b6a5cb2a3c091814fce297c04fb677f72732fb21615102c62a195fdc2e7dfac
MD5 cf85183b87314359488b850f9e97a698
SHA1 6b6c790037eec7ebea4d05590359cb4473f19aea
SHA512 fe484b3fc89aeed3a6b71b90b90ea11a787697e56be3077154b6ddc2646850f6c38589ed422ff792e391638a80a778d33f22e891e76b5d65896c6fb4696a2c3b
SSDEEP 96:3IsUxO9udx4qYp7AJb76BykUbQMtHUOA5Iv+RnsrqeXV+d1g2IW9t2c+cEwF9oug:YVL7ikJb76BQUoUm+RnyXVYO2RvHoug
TLSH
T112327D19436481F3D5D1843D146A7ABB6F2C762196F44FD3CFB39880BE285C6AD79322
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UserInfo.dll

Path C:\Users\Admin\AppData\Local\Temp\nsh481D.tmp\UserInfo.dll
Size 4KB
SHA256 2dbdb3abd5652302254466aefa0f40048832f2a39fbb8a63c97fda8116021ff9
MD5 d41cf0e4d88c60408f3d5b97f49d40c0
SHA1 1aa117b1ef998993f495833a08dd8cb12356be0f
SHA512 35bf8f92d502a007838576c25aa25d1d7cc01a639df624cfb166085b51f1ba9cd4791c854f879e7b138492a3492365d88c0c5d7accfe5ac1e0e73685117f9209
TLSH
T1428160BB62A80CF3C0941BBB41D71CA713B6DC702792011E98470A9A34D4A6FED2E705
MD5 SHA1 SHA512 TLSH

Submit Download

nsDialogs.dll

Path C:\Users\Admin\AppData\Local\Temp\nsh481D.tmp\nsDialogs.dll
Size 9KB
SHA256 4f69550bba4583ae5f4df10d3b2980b3d164eac21d45dba3496f9ed98a675f7c
MD5 72ef340bc58f53d1a196581dcfb80f55
SHA1 f4167ebd1adbb34e7b45a0d013885575c1bdf4fd
SHA512 87919a3768a143dd80fb73c879342cc3ebf8935983af5bb499701559216048f5a0835a0f34c3f0e54f827ff1265b8bd2e369398b901c89303f92ffe6e8cc8d7e
SSDEEP 96:3jp41CMj95rKhkfL5RkEdKkcxM2DjDf3GE/E9v5E9av+Yx4FndY7ndS27gA:3jujesS4HRE/K5MYxcdqn420
TLSH
T10412F8675A0011B3E9A36239306A2D3F8B7C9325D0A37C02C677AE562AF431A7D3A355
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads