Analysis
- max time kernel
150s - max time network
154s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
05/09/2026, 11:00
Static task
static1
Behavioral task
behavioral1
Sample
OgulniegaInstaller.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
OgulniegaInstaller.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target OgulniegaInstaller.exe
- Size 537KB
- Sample260905-m32w8ashld
- SHA256 8abe5d31cede9bab7e04f09ff8cfce0d5eb2b18f7c4e2c7432bb328a65920cb3
- MD5 94f1f88a4a80115e8bf2db77d22d1426
- SHA1 16feae48af9d14b54cc72aa4e69496c460b1956c
- SHA512 1961c2edb387a6f02540aee49437c66c4534d97f4b6d123e97cbb755d149d1db1d8f0a449471e722f0d22693598a6c16144fd6f6eb9f080d44c1cdca5be91c09
- SSDEEP 6144:4P6j0H/9yogIvGv6g8BU3IPob6sFH0BemtsETCIFs92bSkeYe5s+1:7AH/oIzV5sFHZmpR+Eex1
- TLSH T1B9C49E17F69005F5D4A7C178CA524922EB327C4A4772DBCF17E096652E236E09E3FB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
pid Process 2088 OgulniegaInstaller.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 4300 wrote to memory of 2088 4300 OgulniegaInstaller.exe 89
Processes
-
C:\Users\Admin\AppData\Local\Temp\OgulniegaInstaller.exe"C:\Users\Admin\AppData\Local\Temp\OgulniegaInstaller.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:4300 -
C:\Users\Admin\AppData\Local\Temp\winstall_4300_240707031\OgulniegaInstaller.exe"C:\Users\Admin\AppData\Local\Temp\winstall_4300_240707031\OgulniegaInstaller.exe"2⤵
- Executes dropped EXE
PID:2088
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\winstall_4300_240707031\OgulniegaInstaller.exe
- Size 537KB
- SHA256 8abe5d31cede9bab7e04f09ff8cfce0d5eb2b18f7c4e2c7432bb328a65920cb3
- MD5 94f1f88a4a80115e8bf2db77d22d1426
- SHA1 16feae48af9d14b54cc72aa4e69496c460b1956c
- SHA512 1961c2edb387a6f02540aee49437c66c4534d97f4b6d123e97cbb755d149d1db1d8f0a449471e722f0d22693598a6c16144fd6f6eb9f080d44c1cdca5be91c09
- SSDEEP 6144:4P6j0H/9yogIvGv6g8BU3IPob6sFH0BemtsETCIFs92bSkeYe5s+1:7AH/oIzV5sFHZmpR+Eex1
- TLSH T1B9C49E17F69005F5D4A7C178CA524922EB327C4A4772DBCF17E096652E236E09E3FB22
- MD5 SHA1 SHA512 SSDEEP TLSH