Analysis
- max time kernel
149s - max time network
138s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
25/08/2026, 07:33
General
- Target b99d63c4e1606d7bce010421a74ac6c2eb688cf1d9ba76d97d8ec8ca4b5e22b7.exe
- Size 320KB
- Sample260825-jdnfrayakd
- SHA256 b99d63c4e1606d7bce010421a74ac6c2eb688cf1d9ba76d97d8ec8ca4b5e22b7
Malware Config
Signatures
- Drops file in Program Files directory 8 IoCs
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Modifies registry class 16 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b99d63c4e1606d7bce010421a74ac6c2eb688cf1d9ba76d97d8ec8ca4b5e22b7.exe"C:\Users\Admin\AppData\Local\Temp\b99d63c4e1606d7bce010421a74ac6c2eb688cf1d9ba76d97d8ec8ca4b5e22b7.exe"1⤵
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Modifies registry class
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4800-0-0x0000000000400000-0x0000000000462000-memory.dmp
memory/4800-6-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-8-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-5-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-9-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-10-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-11-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-12-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-13-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-14-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-15-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-16-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-17-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-18-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-19-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-20-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-21-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-22-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-23-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-24-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-25-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-26-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-27-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-28-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-29-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-30-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-31-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-32-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-33-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-34-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-35-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-36-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-37-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-38-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-39-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-40-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-41-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-42-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-43-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-44-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-45-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-46-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-47-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-48-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-49-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-50-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-51-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-52-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-53-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-54-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-55-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-56-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-57-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-58-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-59-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-60-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-61-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-62-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-63-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-64-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-65-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-66-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-67-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-68-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-69-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-70-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-528-0x00000000001E0000-0x00000000001FE000-memory.dmp
memory/4800-2863-0x00000000001E0000-0x00000000001FE000-memory.dmp