8a57c7cea8889eddc30523a64c53d9fb019264d907865b77af9431622f90fd5b

Analysis

max time kernel
148s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/08/2026, 02:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
RivaTuner224MSIMOA2009Edition.exe
Size 2.6MB
Sample260824-cmlvysck9v
SHA256 8a57c7cea8889eddc30523a64c53d9fb019264d907865b77af9431622f90fd5b
MD5 c9d6c2e11ab11e1cd342e66b8b254c9d
SHA1 c1769da300a2032b60a7776b3b734fdf3e06829c
SHA512 46d780604f922d07d70bc4469c921d5bbaf49a9a5365c65863985660b147eeb7f19b8ebd41b748615dd4ef23cefb0b67e440963d001458012b27bdeff104f795
SSDEEP 49152:nT6xaucZHH/0E/H5YFgGi2FhMyaYEMw2nb2rbPHZTyK7AU+:Tvn/0CZGi2XrbvWx+
TLSH
T18BC533B9D46E9157E948BCB6C4E1E0A1577AF01089AF17ABCF102E67B53D08FBC17086
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 2 IoCs

pid	Process
4144	RivaTuner224MSIMOA2009Edition.exe
4144	RivaTuner224MSIMOA2009Edition.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	RivaTuner224MSIMOA2009Edition.exe

C:\Users\Admin\AppData\Local\Temp\RivaTuner224MSIMOA2009Edition.exe
"C:\Users\Admin\AppData\Local\Temp\RivaTuner224MSIMOA2009Edition.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:4144

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

InstallOptions.dll

Path C:\Users\Admin\AppData\Local\Temp\nsn558B.tmp\InstallOptions.dll
Size 14KB
SHA256 7e08cb4ff81dbb0573c672301681e31b2042682e9a2204673f811455f823dd37
MD5 9b2ad0546fd834c01a3bdcbfbc95da7d
SHA1 4f92f5a6b269d969ba3340f1c1978d337992a62c
SHA512 5b374fe7cc8d6ff8b93cfcc8deae23f2313f8240c998d04d3e65c196b33c7d36a33930ffd481cdd6d30aa4c73dd2a1c6fe43791e9bf10bd71b33321a8e71c6b8
SSDEEP 192:v6JaVGQ+xI5EeuyvMmGpeWH2J5xprN+AxTKK72dwF7dBdcQOz:v6JaVh4I5rpPbTK+BdhO
TLSH
T1E9523A51778888F3E796053EB45237079F9D5226B8929ED1CA331FC62D2719E2FB1302
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LangDLL.dll

Path C:\Users\Admin\AppData\Local\Temp\nsn558B.tmp\LangDLL.dll
Size 5KB
SHA256 7e49f8b791231c84e80eee56c5dfe8ee6feabe7fb6efba2c30a1ae1621c9e509
MD5 e79062d4e5969b67241a96bad058dd07
SHA1 67adf76bc6718e87633ad2669119a4cfac71fb5c
SHA512 6269f26ee92a7576e8e17b156cf2cf90c862c007c684a44e55194d2aef605de5304b9e7822a001db477bc672c52db4e64db7f02e4684488705d594698035a0ed
SSDEEP 48:SnXQ/z+vUML8eYXICmlmGYKHz0JSpXSxwo6mpwzcR3RqG8aEJqABofgMGKO:Pz+MM4eqmvz0JScx56mpwzAhWOGV
TLSH
T133B17072F38005B5D5A44977146BA7D33663DD302B9A021FAB67051B2800D93AC3DB83
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nsn558B.tmp\ioSpecial.ini
Size 686B
SHA256 d4f677e609d3407375120ed2040ec14c835a2428bd4e77e4459790e2135f1326
MD5 5835e10c0b5ae17b5f4f6c80095eca17
SHA1 bfa24da1e8816703c688144fb07c54660919d1f3
SHA512 ad2605a5e82c8a49e0dc20323cdc44396c931ed21cc7e253776d990c2ecc55666c6a34530779ec2d97ec09f7598e63b48d7cffccc20d299b85673a46af1b3bda
TLSH
T12C019E89941FA3394820519664FD37A147D02C3C47513DF6F452CC86678DDD38AEDED2
MD5 SHA1 SHA512 TLSH

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nsn558B.tmp\ioSpecial.ini
Size 725B
SHA256 d3f08c3f84408940209672f0e48a336241bc014b1ffbff719e46b0cb9770c3f9
MD5 8363fd6bc1f2bdc4fccf39195c0f641a
SHA1 deced40702cddb2c75144db684e6c27b34867d41
SHA512 ef92a4269d83b3d4104bd49fb618d79c08855d92d92f2bed7683f729d0e493245ef9f673056b1fe7751d2251e248dca192bc403372112beeb0448a19146bb780
TLSH
T12F01C089841F9375482011D660FE37A257E02C2C47163CF1F0528C8A678CDD38AEDED2
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads