Analysis

  • user interaction
    yes
  • max time kernel
    151s
  • max time network
    162s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    27/08/2026, 15:17

General

  • Target
    Five Nights at Freddy's 3.exe
  • Size 111.2MB
  • Sample260827-spjrdaaa99
  • SHA256 705ebbda9704e3b3d0f4bdbae25f691abd10713191068d66ca1df6fedc5e2260
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 8 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Five Nights at Freddy's 3.exe
    "C:\Users\Admin\AppData\Local\Temp\Five Nights at Freddy's 3.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:5088

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Perspective.mfx

        • Path C:\Users\Admin\AppData\Local\Temp\mrt860E.tmp\Perspective.mfx
        • Size 15KB
        • SHA256 090925a4cd961f22b1ecd2fba4ce04ab063e26507a1dc09b1d6a40c4860a8777
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cctrans.dll

        • Path C:\Users\Admin\AppData\Local\Temp\mrt860E.tmp\cctrans.dll
        • Size 150KB
        • SHA256 43cc81ac47386546b42a2fdd5ca52173418c8912b86ccf8618344c5b32e46d26
        • MD5 SHA1 SHA512 SSDEEP TLSH

        kcclock.mfx

        • Path C:\Users\Admin\AppData\Local\Temp\mrt860E.tmp\kcclock.mfx
        • Size 108KB
        • SHA256 f2319a7359fbcb8860f1c468aad602383c49effb7c110de01ff13acdcf3a5ab9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        kcini.mfx

        • Path C:\Users\Admin\AppData\Local\Temp\mrt860E.tmp\kcini.mfx
        • Size 28KB
        • SHA256 20bad52f883914c6fb11eec9d94173a53a67f2eb97413ba9118edb101f11abb3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mmf2d3d9.dll

        • Path C:\Users\Admin\AppData\Local\Temp\mrt860E.tmp\mmf2d3d9.dll
        • Size 1.1MB
        • SHA256 1a46578e8c579e366bf28b081a3c24abf7c74620950013dbf99a3da6570bf871
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mmfs2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\mrt860E.tmp\mmfs2.dll
        • Size 460KB
        • SHA256 2026cc0c648a021d98245ab2430cdbe647cb5f312e9b212aee10ffdf08ed130b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        waveflt.sft

        • Path C:\Users\Admin\AppData\Local\Temp\mrt860E.tmp\waveflt.sft
        • Size 8KB
        • SHA256 98134d326a09569bd5933ffcb026009575509a1bfc20384ef8eebb762aabcd38
        • MD5 SHA1 SHA512 SSDEEP TLSH

        freddy3

        • Path C:\Users\Admin\AppData\Roaming\MMFApplications\freddy3
        • Size 64B
        • SHA256 cf7f75c5261a01860ad3866e5d8cf6ea13db997c659888360d17dfc45399dee1
        • MD5 SHA1 SHA512 TLSH