25a36f873e1155b528fc8a81c85b78d765e566001edbfae213c80c6ef1d1a5a7

Analysis

max time kernel
149s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/09/2026, 22:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
25a36f873e1155b528fc8a81c85b78d765e566001edbfae213c80c6ef1d1a5a7.exe
Size 146KB
Sample260916-2ez52sfa79
SHA256 25a36f873e1155b528fc8a81c85b78d765e566001edbfae213c80c6ef1d1a5a7
MD5 67324cbae704e5ba673a91acaf31d4bc
SHA1 6c7eae68782355d3a395bfd9de224e893beef918
SHA512 9c43fd280385f4b34991a99751340beb3884b222341c3ed4b2d29d5940c80ec7f5cad9a233970101817da2ba2ab16d15a10ac0860c8d4d75900479b2f53c4c74
SSDEEP 3072:+nZH41xBuiJ6v/Lcn7+dPYuVAFoO/yzsR0QdXvA9V5nFsZoiw:Zx4NCkAUBvsR0QdXvSV5nFtj
TLSH
T1CFE3F119E515C3F3C29312F5770D49CAB37474F6F0DA209081B8781CABBADA91377A86
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery spyware trojan

Malware Config

Signatures

Deletes itself 1 IoCs

pid	Process
2624	25a36f873e1155b528fc8a81c85b78d765e566001edbfae213c80c6ef1d1a5a7.exe

Executes dropped EXE 1 IoCs

pid	Process
2624	25a36f873e1155b528fc8a81c85b78d765e566001edbfae213c80c6ef1d1a5a7.exe

Modifies trusted root certificate store through registry 1 TTPs 2 IoCs

A root certificate was added, modified, or removed in the trusted certificate store registry paths.

defense_evasion

Install Root Certificate

T1553.004

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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	25a36f873e1155b528fc8a81c85b78d765e566001edbfae213c80c6ef1d1a5a7.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 5c0000000100000004000000001000001900000001000000100000002fe1f70bb05d7c92335bc5e05b984da60f00000001000000200000003f0411ede9c4477057d57e57883b1f205b20cdc0f3263129b1ee0269a2678f63030000000100000014000000cabd2a79a1076a31f21d253635cb039d4329a5e814000000010000001400000079b459e67bb6e5e40173800888c81a58f6e99b6e0400000001000000100000000cd2f9e0da1773e9ed864da5e370e74e20000000010000006f0500003082056b30820353a0030201020211008210cfb0d240e3594463e0bb63828b00300d06092a864886f70d01010b0500304f310b300906035504061302555331293027060355040a1320496e7465726e65742053656375726974792052657365617263682047726f7570311530130603550403130c4953524720526f6f74205831301e170d3135303630343131303433385a170d3335303630343131303433385a304f310b300906035504061302555331293027060355040a1320496e7465726e65742053656375726974792052657365617263682047726f7570311530130603550403130c4953524720526f6f7420583130820222300d06092a864886f70d01010105000382020f003082020a0282020100ade82473f41437f39b9e2b57281c87bedcb7df38908c6e3ce657a078f775c2a2fef56a6ef6004f28dbde68866c4493b6b163fd14126bbf1fd2ea319b217ed1333cba48f5dd79dfb3b8ff12f1219a4bc18a8671694a66666c8f7e3c70bfad292206f3e4c0e680aee24b8fb7997e94039fd347977c99482353e838ae4f0a6f832ed149578c8074b6da2fd0388d7b0370211b75f2303cfa8faeddda63abeb164fc28e114b7ecf0be8ffb5772ef4b27b4ae04c12250c708d0329a0e15324ec13d9ee19bf10b34a8c3f89a36151deac870794f46371ec2ee26f5b9881e1895c34796c76ef3b906279e6dba49a2f26c5d010e10eded9108e16fbb7f7a8f7c7e50207988f360895e7e237960d36759efb0e72b11d9bbc03f94905d881dd05b42ad641e9ac0176950a0fd8dfd5bd121f352f28176cd298c1a80964776e4737baceac595e689d7f72d689c50641293e593edd26f524c911a75aa34c401f46a199b5a73a516e863b9e7d72a712057859ed3e5178150b038f8dd02f05b23e7b4a1c4b730512fcc6eae050137c439374b3ca74e78e1f0108d030d45b7136b407bac130305c48b7823b98a67d608aa2a32982ccbabd83041ba2830341a1d605f11bc2b6f0a87c863b46a8482a88dc769a76bf1f6aa53d198feb38f364dec82b0d0a28fff7dbe21542d422d0275de179fe18e77088ad4ee6d98b3ac6dd27516effbc64f533434f0203010001a3423040300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff301d0603551d0e0416041479b459e67bb6e5e40173800888c81a58f6e99b6e300d06092a864886f70d01010b05000382020100551f58a9bcb2a850d00cb1d81a6920272908ac61755c8a6ef882e5692fd5f6564bb9b8731059d321977ee74c71fbb2d260ad39a80bea17215685f1500e59ebcee059e9bac915ef869d8f8480f6e4e99190dc179b621b45f06695d27c6fc2ea3bef1fcfcbd6ae27f1a9b0c8aefd7d7e9afa2204ebffd97fea912b22b1170e8ff28a345b58d8fc01c954b9b826cc8a8833894c2d843c82dfee965705ba2cbbf7c4b7c74e3b82be31c822737392d1c280a43939103323824c3c9f86b255981dbe29868c229b9ee26b3b573a82704ddc09c789cb0a074d6ce85d8ec9efceabc7bbb52b4e45d64ad026cce572ca086aa595e315a1f7a4edc92c5fa5fbffac28022ebed77bbbe3717b9016d3075e46537c3707428cd3c4969cd599b52ae0951a8048ae4c3907cecc47a452952bbab8fbadd233537de51d4d6dd5a1b1c7426fe64027355ca328b7078de78d3390e7239ffb509c796c46d5b415b3966e7e9b0c963ab8522d3fd65be1fb08c284fe24a8a389daac6ae1182ab1a843615bd31fdc3b8d76f22de88d75df17336c3d53fb7bcb415fffdca2d06138e196b8ac5d8b37d775d533c09911ae9d41c1727584be0241425f67244894d19b27be073fb9b84f817451e17ab7ed9d23e2bee0d52804133c31039edd7a6c8fc60718c67fde478e3f289e0406cfa5543477bdec899be91743df5bdb5ffe8e1e57a2cd409d7e6222dade1827	25a36f873e1155b528fc8a81c85b78d765e566001edbfae213c80c6ef1d1a5a7.exe

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	25a36f873e1155b528fc8a81c85b78d765e566001edbfae213c80c6ef1d1a5a7.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	25a36f873e1155b528fc8a81c85b78d765e566001edbfae213c80c6ef1d1a5a7.exe

Modifies system certificate store 2 TTPs 5 IoCs

defense_evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\F37620FC4B1CDDD2A3D74B1D5E8DB42E244CA006	25a36f873e1155b528fc8a81c85b78d765e566001edbfae213c80c6ef1d1a5a7.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\F37620FC4B1CDDD2A3D74B1D5E8DB42E244CA006\Blob = 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	25a36f873e1155b528fc8a81c85b78d765e566001edbfae213c80c6ef1d1a5a7.exe
Key created	\REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\3C34E356C7FC17F5ACF04824BC587C6C623951A2	25a36f873e1155b528fc8a81c85b78d765e566001edbfae213c80c6ef1d1a5a7.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates\3C34E356C7FC17F5ACF04824BC587C6C623951A2\Blob = 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	25a36f873e1155b528fc8a81c85b78d765e566001edbfae213c80c6ef1d1a5a7.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8	25a36f873e1155b528fc8a81c85b78d765e566001edbfae213c80c6ef1d1a5a7.exe

Suspicious behavior: RenamesItself 1 IoCs

pid	Process
4840	25a36f873e1155b528fc8a81c85b78d765e566001edbfae213c80c6ef1d1a5a7.exe

Suspicious use of UnmapMainImage 2 IoCs

pid	Process
4840	25a36f873e1155b528fc8a81c85b78d765e566001edbfae213c80c6ef1d1a5a7.exe
2624	25a36f873e1155b528fc8a81c85b78d765e566001edbfae213c80c6ef1d1a5a7.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 4840 wrote to memory of 2624	4840	25a36f873e1155b528fc8a81c85b78d765e566001edbfae213c80c6ef1d1a5a7.exe	83

C:\Users\Admin\AppData\Local\Temp\25a36f873e1155b528fc8a81c85b78d765e566001edbfae213c80c6ef1d1a5a7.exe
"C:\Users\Admin\AppData\Local\Temp\25a36f873e1155b528fc8a81c85b78d765e566001edbfae213c80c6ef1d1a5a7.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: RenamesItself
- Suspicious use of UnmapMainImage
- Suspicious use of WriteProcessMemory
PID:4840
- C:\Users\Admin\AppData\Local\Temp\25a36f873e1155b528fc8a81c85b78d765e566001edbfae213c80c6ef1d1a5a7.exe
  C:\Users\Admin\AppData\Local\Temp\25a36f873e1155b528fc8a81c85b78d765e566001edbfae213c80c6ef1d1a5a7.exe
  2⤵
  - Deletes itself
  - Executes dropped EXE
  - Modifies trusted root certificate store through registry
  - System Location Discovery: System Language Discovery
  - Modifies system certificate store
  - Suspicious use of UnmapMainImage
  PID:2624

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

25a36f873e1155b528fc8a81c85b78d765e566001edbfae213c80c6ef1d1a5a7.exe

Path C:\Users\Admin\AppData\Local\Temp\25a36f873e1155b528fc8a81c85b78d765e566001edbfae213c80c6ef1d1a5a7.exe
Size 146KB
SHA256 31b58cc715dce761558f6f825cec87d03606f73127b9839c3c59aa0e59dda750
MD5 b22c4e55dbbaecc5e1a0eeb7a35de14d
SHA1 185aa2ee328027fc76f4b0ecc0e7dd8932d6a3ef
SHA512 6cb6c1098ab6c9226dd9c60a41808e4cc8c13c1d0a4068f1081600ff6cc0add9a16c99ed6efec6e16a6e9097d34ad94a5bfe2986af8f0d49f277081ce15880dc
SSDEEP 3072:Fiqc771eHU2YZFVCC2siWkXCfgO/UQ8ye8THnisV5nFsZoiw:C71eHU2YLUGAyeAjV5nFtj
TLSH
T181E3F13F7A05BBE1FDD10272095B4862B73952BB51EBA56019C2C41E06E7F11C2B27FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2624-15-0x0000000000400000-0x0000000000486000-memory.dmp

Download

memory/2624-16-0x00000000001A0000-0x00000000001C1000-memory.dmp

Download

memory/2624-18-0x0000000000400000-0x000000000041F000-memory.dmp

Download

memory/2624-23-0x0000000000400000-0x000000000041F000-memory.dmp

Download

memory/2624-24-0x0000000000400000-0x000000000041F000-memory.dmp

Download

memory/2624-31-0x0000000000400000-0x0000000000486000-memory.dmp

Download

memory/4840-0-0x0000000000400000-0x0000000000486000-memory.dmp

Download

memory/4840-1-0x0000000001490000-0x00000000014B1000-memory.dmp

Download

memory/4840-2-0x0000000000400000-0x000000000041F000-memory.dmp

Download

memory/4840-8-0x0000000000400000-0x000000000041F000-memory.dmp

Download

memory/4840-14-0x0000000000400000-0x000000000041F000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads