da2e7cf9c7759a58fcf6a127530d98ecbba7d3ec13808223d06bae7e3830ee30

Analysis

max time kernel
149s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
31/08/2026, 13:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
da2e7cf9c7759a58fcf6a127530d98ecbba7d3ec13808223d06bae7e3830ee30.exe
Size 471KB
Sample260831-qpca7agg49
SHA256 da2e7cf9c7759a58fcf6a127530d98ecbba7d3ec13808223d06bae7e3830ee30
MD5 844d7f227ff4ce016884921d8301fd02
SHA1 8e24579acc484286a2d86b051a47f06993a4df8d
SHA512 ff3404b65acd7f558a9e595291cfdd13b459dd65b4c9531fb64a3a5037338131bd7b8fbc94d9048c5b7107b716a88c4f5d6ffcf099432f0954df4d6b144f1184
SSDEEP 6144:1k0NABnQ0jZSXyHLrDaxIywWQRsyOO3DRrwsS05/tAYBa5WR:1/XyH3DaomyZVxBa5g
TLSH
T124A4927DF4908F35D1DE37BA44DE0B60F776004E8B972B5B22D8A1313D893A41E6A29D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File created	C:\Windows\dextor32.exe	da2e7cf9c7759a58fcf6a127530d98ecbba7d3ec13808223d06bae7e3830ee30.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	da2e7cf9c7759a58fcf6a127530d98ecbba7d3ec13808223d06bae7e3830ee30.exe

C:\Users\Admin\AppData\Local\Temp\da2e7cf9c7759a58fcf6a127530d98ecbba7d3ec13808223d06bae7e3830ee30.exe
"C:\Users\Admin\AppData\Local\Temp\da2e7cf9c7759a58fcf6a127530d98ecbba7d3ec13808223d06bae7e3830ee30.exe"
1⤵
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
PID:4248

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CKY3 - Bam Margera World Industries Alien Workshop Full Downloader.exe

Path C:\Windows\Temp\CKY3 - Bam Margera World Industries Alien Workshop Full Downloader.exe
Size 471KB
SHA256 da2e7cf9c7759a58fcf6a127530d98ecbba7d3ec13808223d06bae7e3830ee30
MD5 844d7f227ff4ce016884921d8301fd02
SHA1 8e24579acc484286a2d86b051a47f06993a4df8d
SHA512 ff3404b65acd7f558a9e595291cfdd13b459dd65b4c9531fb64a3a5037338131bd7b8fbc94d9048c5b7107b716a88c4f5d6ffcf099432f0954df4d6b144f1184
SSDEEP 6144:1k0NABnQ0jZSXyHLrDaxIywWQRsyOO3DRrwsS05/tAYBa5WR:1/XyH3DaomyZVxBa5g
TLSH
T124A4927DF4908F35D1DE37BA44DE0B60F776004E8B972B5B22D8A1313D893A41E6A29D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4248-101-0x0000000000400000-0x000000000047C000-memory.dmp

Download