Analysis
- max time kernel
38s - max time network
20s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
22/08/2026, 10:56
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Native Instruments - FM8 v1.4.6.exe
Resource
win11ltsc2024-20260709-en
3 signatures
900 seconds
General
- Target Native Instruments - FM8 v1.4.6.exe
- Size 220.6MB
- Sample260822-m15v4atcmd
- SHA256 164b7b8ea883a649b900ad0ed0aa5d52504d5b5cddd5735c083e002b98cef772
- MD5 1e434348480a6c585b0ea00956c250e0
- SHA1 303e56338229ecbe8ea2c3f63e5fc657e380d7ee
- SHA512 65db6afe43ae3e5319553b8be20dcfd1896c0ab5dafc16b8945cea3ae1d4152e4972464a93ce2f96dd3b114c07592e9c6441643022c784d8b844ce37d740b97d
- SSDEEP 6291456:9+lcvWDObOX6w3BsPdSW+wZjB7hftUVcWh:93W6a/xF8ZjLftpWh
- TLSH T181B8333679189FAFC0D3E17A21456A4E60B9BD1F909D69DF37448E0D24A6033ABB437C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Drops desktop.ini file(s) 2 IoCs
description ioc Process File created C:\Users\Admin\AppData\Local\Temp\Native Instruments - FM8 v1.4.6\data\OFFLINE\BE2FE16C\2012D1CB\desktop.ini Native Instruments - FM8 v1.4.6.exe File opened for modification C:\Users\Admin\AppData\Local\Temp\Native Instruments - FM8 v1.4.6\data\OFFLINE\BE2FE16C\2012D1CB\desktop.ini Native Instruments - FM8 v1.4.6.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Native Instruments - FM8 v1.4.6.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1384 Native Instruments - FM8 v1.4.6.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\Native Instruments - FM8 v1.4.6\data\OFFLINE\mIDEFunc.dll\mEXEFunc.dll
- Size 99KB
- SHA256 a3d8bc6a70307e29ed11b05d5b52c1b3d5c2640f85dfc7f67e4e38f6cdacabed
- MD5 b491a4eba59ab39c7705089523d0f0e0
- SHA1 b0c266593160edc50bb49b6bd7a45a96d104c0d8
- SHA512 9ae066492a17d402dc21349d228866332e3a37bbfe29f38eb5aa0bdb6dbed925f21b51d4d4ddfe30b26c936f27f73aa9a58544c9781b4b11d2eae25d201c6158
- SSDEEP 3072:9X/nXdbu3f7+TEviG7Xud+v62lBDpCTI:9X/+felGys/Dp
- TLSH T14DA35A92F9C0C531F0712AFCD82F52456DBA7E12393C7D6A76E09D0A0E6EAC0682D757
- MD5 SHA1 SHA512 SSDEEP TLSH