Overview
overview
10Static
static
7IMG001.scr
windows11-ltsc_2024-x64
7$PLUGINSDI...os.dll
windows11-ltsc_2024-x64
3$PLUGINSDIR/inetc.dll
windows11-ltsc_2024-x64
3$R9/NsCpuC...32.exe
windows11-ltsc_2024-x64
7$R9/NsCpuC...64.exe
windows11-ltsc_2024-x64
7$R9/Plugin...os.dll
windows11-ltsc_2024-x64
3$R9/Plugins/inetc.dll
windows11-ltsc_2024-x64
3$R9/Plugins/tftp.exe
windows11-ltsc_2024-x64
10$R9/Stubs/bzip2.exe
windows11-ltsc_2024-x64
3$R9/Stubs/...id.exe
windows11-ltsc_2024-x64
3$R9/Stubs/lzma.exe
windows11-ltsc_2024-x64
3$R9/Stubs/zlib.exe
windows11-ltsc_2024-x64
3$R9/makensis.exe
windows11-ltsc_2024-x64
3Analysis
- max time kernel
150s - max time network
115s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
05/09/2026, 20:10
Behavioral task
behavioral1
Sample
IMG001.scr
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/ExecDos.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/inetc.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral4
Sample
$R9/NsCpuCNMiner32.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$R9/NsCpuCNMiner64.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral6
Sample
$R9/Plugins/ExecDos.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
$R9/Plugins/inetc.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral8
Sample
$R9/Plugins/tftp.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
$R9/Stubs/bzip2.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral10
Sample
$R9/Stubs/bzip2_solid.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
$R9/Stubs/lzma.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral12
Sample
$R9/Stubs/zlib.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
$R9/makensis.exe
Resource
win11ltsc2024-20260710-en
General
- Target $R9/makensis.exe
- Size 484KB
- Sample260905-yxtjfafg39
- SHA256 572a6f9cb5b37b6eec13b578d346c2568ce3ec88bb711d75dac9e82fc01c8860
- MD5 e79833cb0d7b2573819ded2122b57bdd
- SHA1 71ead8cd4a95704a0cade630bb3ce280af7e028e
- SHA512 4b023e60392ead0691621a1306286fda6cdc4c447f164c8f249c59db2500d8b98514d93c7a7e8d3cfd60818d2ca74e84ec24163492765b6c17fe94ea0385bd69
- SSDEEP 12288:LhHlj+wtKJVIo9ZoACV6sil8+eSycI+Tt0XCyzLHWj:Lxl+0KJVpneV6siy+I+TtcCyzLHW
- TLSH T178B4AF117DB580B5CD46B1B00DBE9B767678D6960B228BC3B7C4DD382E234B1A33725A
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language makensis.exe