Overview
overview
10Static
static
3App/alpha5...-64.js
windows10-2004-x64
3App/alpha5...-64.js
windows11-ltsc_2024-x64
3App/alpha5...64.exe
windows10-2004-x64
3App/alpha5...64.exe
windows11-ltsc_2024-x64
3Installer....64.exe
windows10-2004-x64
10Installer....64.exe
windows11-ltsc_2024-x64
10$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDIR/UAC.dll
windows10-2004-x64
3$PLUGINSDIR/UAC.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...os.dll
windows10-2004-x64
3$PLUGINSDI...os.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...sh.dll
windows10-2004-x64
3$PLUGINSDI...sh.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ce.dll
windows10-2004-x64
3$PLUGINSDI...ce.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ry.dll
windows10-2004-x64
3$PLUGINSDI...ry.dll
windows11-ltsc_2024-x64
3Analysis
- max time kernel
148s - max time network
147s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
14/09/2026, 15:59
Static task
static1
Behavioral task
behavioral1
Sample
App/alpha59621/Installer-35-12-5-64.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
App/alpha59621/Installer-35-12-5-64.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
App/alpha59621/Installer-35-12-5-64.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
App/alpha59621/Installer-35-12-5-64.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
Installer.35-12-5-64.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
Installer.35-12-5-64.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/MoreInfo.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/MoreInfo.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/UAC.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/execDos.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/execDos.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/newadvsplash.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/newadvsplash.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/newtextreplace.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/newtextreplace.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/registry.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/registry.dll
Resource
win11ltsc2024-20260709-en
General
- Target App/alpha59621/Installer-35-12-5-64.exe
- Size 17.6MB
- Sample260914-te6c3abe82
- SHA256 c1c84e86807e1a0f0594fae6883f904c958710e8dbeb760249fcc59eec9e9949
- MD5 58b991179f8d4da130a15fbf7c6a5dbe
- SHA1 bfd37182cd581be0f605fea0e15d5fd39fd3d1be
- SHA512 46bbdb276f0fca102748a9f3e524f2588190c26986622a9caea82d444ad7e9bd7da953d40269346e46b561ccf35c577fccfc4a57930f7c47047939bfbedb97ac
- SSDEEP 393216:ouwsDosgM/q+Yv5Yr+ecWxkN0StzZX1zVmEAI9:TDosgM/q+Yv5Yr+ecY6zZlvAI9
- TLSH T14D079D13B6D301E1E9A3567004FB622B5637AA12873089CBF25C3A546F732D17B377A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Installer-35-12-5-64.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3528 Installer-35-12-5-64.exe 3528 Installer-35-12-5-64.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\App\alpha59621\Installer-35-12-5-64.exe"C:\Users\Admin\AppData\Local\Temp\App\alpha59621\Installer-35-12-5-64.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:3528
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:1748