Overview

overview

7

Static

static

5

338bbd1498...58.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    149s
  • max time network
    133s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    10/09/2026, 12:41

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    338bbd1498c437d52338ba8a5270bbcbf1c4904cf8bf6f88b0d7a88abaeedd58.exe
  • Size 5.0MB
  • Sample260910-pw1fxsha45
  • SHA256 338bbd1498c437d52338ba8a5270bbcbf1c4904cf8bf6f88b0d7a88abaeedd58
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discovery

Malware Config

Signatures

  • Loads dropped DLL 11 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\338bbd1498c437d52338ba8a5270bbcbf1c4904cf8bf6f88b0d7a88abaeedd58.exe
    "C:\Users\Admin\AppData\Local\Temp\338bbd1498c437d52338ba8a5270bbcbf1c4904cf8bf6f88b0d7a88abaeedd58.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    PID:2260

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        1.bmp
        • Path C:\Users\Admin\AppData\Local\Temp\nse432F.tmp\1.bmp
        • Size 540KB
        • SHA256 6dc43bcbd3cda606a947bb74088e1cf8b63da5f68c53acf47c09e63aa1faee31
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        BrandingURL.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nse432F.tmp\BrandingURL.dll
        • Size 4KB
        • SHA256 bb2b9c272b8b66bc1b414675c2acba7afad03fff66a63babee3ee57ed163d19e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        NSISdl.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nse432F.tmp\NSISdl.dll
        • Size 14KB
        • SHA256 fd0e8be2135f3d326b65520383a3468c3983fa32c9c93594d986b16709d80f28
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SkinBtn.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nse432F.tmp\SkinBtn.dll
        • Size 4KB
        • SHA256 ee1c06692a757473737b0ebdef16f77b63afac864d0890022d905e4873737dd6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nse432F.tmp\System.dll
        • Size 11KB
        • SHA256 dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WndProc.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nse432F.tmp\WndProc.dll
        • Size 3KB
        • SHA256 e7b3115fa2ce4a8fa09beeefa4fb634a474197f38a2854ce9be60d0a26016458
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        nsDialogs.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nse432F.tmp\nsDialogs.dll
        • Size 9KB
        • SHA256 3d0060c5c9400a487dbefe4ac132dd96b07d3a4ba3badab46a7410a667c93457
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download