02ba2a11fbe8133bf996df2126ef5a58c39d58281f6c5d785c86c7170cbd37b1

Analysis

max time kernel
150s
max time network
138s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/09/2026, 07:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
RenderRepairCpt_tl4xz8.exe
Size 14.7MB
Sample260910-jfr7qazemd
SHA256 02ba2a11fbe8133bf996df2126ef5a58c39d58281f6c5d785c86c7170cbd37b1
MD5 048a381541cfed5d19fad3273d3e0de9
SHA1 571cb7401c3e6d9e5c4219d7dcff19a76689c0cd
SHA512 852d54e50c4110200c230f44d84ae7f01fa7f04dc5d0bc6d386b2a36b0cb7e28f224d226c7e1967a4cba99c1ea09d28db1c653b8dbfab8731e5b281354fabc04
SSDEEP 393216:fjRtUu6KYPNfHqpH3HgnQDy1N3Vb7O/mQNPwlL:dtx65fmAnLNFaNoL
TLSH
T144F63360692E3AB4E6FBD4769492A1E78D363BB810957B40FFC12B7588277DC932C350
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
3308	RenderRepairCpt_tl4xz8.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	RenderRepairCpt_tl4xz8.exe

C:\Users\Admin\AppData\Local\Temp\RenderRepairCpt_tl4xz8.exe
"C:\Users\Admin\AppData\Local\Temp\RenderRepairCpt_tl4xz8.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:3308

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsvEBF2.tmp\System.dll
Size 28KB
SHA256 a9cb4580afcc0d0ed6754169237758d04d0a29759140206662af8f90b209def2
MD5 43cc2c7cfcb400c231dffc499b6d1301
SHA1 919fbfaf7547a26960749160cd628f083e7ca675
SHA512 beb570fc7c859667277985ea4656f3b7692975e77d4e831cbbb27b9f139b0558065f28b80be9aed970d32f75a4db24af976d034fed4518d68f610bdf19e4e9dd
SSDEEP 384:R6F3HLD3sx/to0y9eqd9sOfjjQLHczMJRYo6Hdsrzwx8gCEb:RG/EVypd+OeJRd6HJ
TLSH
T13CD20809FE46C9F3C1A2C57449DFE7378926BD288B264D67FE1F9E08BC636125E08205
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/3308-4-0x0000000074339000-0x000000007433A000-memory.dmp

Download

memory/3308-6-0x0000000000400000-0x0000000000469000-memory.dmp