Overview
overview
8Static
static
5Adobe CC 2...up.exe
windows10-2004-x64
7assets/EUL...e.html
windows10-2004-x64
3assets/EUL...e.html
windows10-2004-x64
3assets/EUL...e.html
windows10-2004-x64
3assets/EUL...e.html
windows10-2004-x64
3assets/EUL...e.html
windows10-2004-x64
3assets/EUL...e.html
windows10-2004-x64
3assets/EUL...e.html
windows10-2004-x64
3assets/EUL...e.html
windows10-2004-x64
3assets/EUL...e.html
windows10-2004-x64
3P6Native.dll
windows10-2004-x64
3Adobe CC 2...up.exe
windows10-2004-x64
7Adobe CC 2...64.exe
windows10-2004-x64
7Adobe CC 2...86.exe
windows10-2004-x64
7Adobe CC 2...64.exe
windows10-2004-x64
7Adobe CC 2...86.exe
windows10-2004-x64
Adobe CC 2...64.exe
windows10-2004-x64
7Adobe CC 2...86.exe
windows10-2004-x64
7Adobe CC 2...64.exe
windows10-2004-x64
4Adobe CC 2...86.exe
windows10-2004-x64
4Adobe CC 2...64.exe
windows10-2004-x64
4Adobe CC 2...86.exe
windows10-2004-x64
4Adobe CC 2...64.exe
windows10-2004-x64
7Adobe CC 2...86.exe
windows10-2004-x64
7Adobe CC 2...IM.dll
windows10-2004-x64
4Adobe CC 2...ry.dll
windows10-2004-x64
3Crack/Emul...er.exe
windows10-2004-x64
7Crack/Keyg...en.exe
windows10-2004-x64
5Crack/Keyg...le.cmd
windows10-2004-x64
8Crack/Patc...er.exe
windows10-2004-x64
7autoplay.exe
windows10-2004-x64
7unicows.dll
windows10-2004-x64
3Analysis
- max time kernel
149s - max time network
178s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
10/09/2026, 16:26
Behavioral task
behavioral1
Sample
Adobe CC 2017/Set-up.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
assets/EULA/cs_CZ/license.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral3
Sample
assets/EULA/da_DK/license.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
assets/EULA/de_DE/license.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral5
Sample
assets/EULA/en_AE/license.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
assets/EULA/en_GB/license.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
assets/EULA/en_IL/license.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
assets/EULA/en_US/license.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
assets/EULA/es_ES/license.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
assets/EULA/es_MX/license.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral11
Sample
P6Native.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Adobe CC 2017/packages/setup.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral13
Sample
Adobe CC 2017/payloads/Microsoft VC 2005 Redist (x64)/vcredist_x64.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
Adobe CC 2017/payloads/Microsoft VC 2005 Redist (x86)/vcredist_x86.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral15
Sample
Adobe CC 2017/payloads/Microsoft VC 2008 Redist (x64)/vcredist_x64.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
Adobe CC 2017/payloads/Microsoft VC 2008 Redist (x86)/vcredist_x86.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral17
Sample
Adobe CC 2017/payloads/Microsoft VC 2010 Redist (x64)/vcredist_x64.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
Adobe CC 2017/payloads/Microsoft VC 2010 Redist (x86)/vcredist_x86.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral19
Sample
Adobe CC 2017/payloads/Microsoft VC 2012 Redist (x64)/vcredist_x64.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
Adobe CC 2017/payloads/Microsoft VC 2012 Redist (x86)/vcredist_x86.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral21
Sample
Adobe CC 2017/payloads/Microsoft VC 2013 Redist (x64)/vcredist_x64.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
Adobe CC 2017/payloads/Microsoft VC 2013 Redist (x86)/vcredist_x86.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral23
Sample
Adobe CC 2017/payloads/Microsoft VC 2015 Redist (x64)/vcredist_x64.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
Adobe CC 2017/payloads/Microsoft VC 2015 Redist (x86)/vcredist_x86.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral25
Sample
Adobe CC 2017/resources/AdobePIM.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
Adobe CC 2017/resources/updaterinventory.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral27
Sample
Crack/Emul/amtemu.v0.9.2-painter.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
Crack/Keygen/Activation_Keygen.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral29
Sample
Crack/Keygen/Check_Disable.cmd
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
Crack/Patch/adobe.snr.patch.v2.0-painter.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral31
Sample
autoplay.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
unicows.dll
Resource
win10v2004-20260513-en
General
- Target Crack/Keygen/Activation_Keygen.exe
- Size 109KB
- Sample260910-txhpqadr7z
- SHA256 c5d9c52583eefd03728ba877baf21725f9e2da4435e9433b87dc82b77b695edd
- MD5 8c03fbbef9db991bb02ab35bf0d2718e
- SHA1 d0caee799f530bdabeccdba7f329f6fbc027c395
- SHA512 ea05c4d9dad4087589cb39ea9421bf0215f6567ef7de3375b87eb9ce4953b812a01fa1b92514618a534f04c8fea1518a76307c10a2c914b345edb34122a721f1
- SSDEEP 3072:0H451OJpM1uOcIbqaORUF0/+8v51AwGoG94dF:l4pM1uLIbCKFq++RGT4dF
- TLSH T1F3B30296BE920C84C510BAFB6163E97A7C82EF13A9C52713CBEE7C5B79F0354254904E
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral28/memory/3988-0-0x0000000000400000-0x00000000004AB000-memory.dmp upx behavioral28/memory/3988-2-0x0000000000400000-0x00000000004AB000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Activation_Keygen.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Crack\Keygen\Activation_Keygen.exe"C:\Users\Admin\AppData\Local\Temp\Crack\Keygen\Activation_Keygen.exe"1⤵
- System Location Discovery: System Language Discovery
PID:3988
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x4fc 0x4081⤵PID:1776