Analysis
- max time kernel
149s - max time network
138s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
16/09/2026, 19:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
General
- Target 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe
- Size 9.5MB
- Sample260916-yfghjsdc89
- SHA256 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324
- MD5 256ea31af46a1287e43899538dd23bf4
- SHA1 6b7b24ec0525c6a240f746c71b0fc4f5f87b9fdd
- SHA512 1e3a366fa3077573f9bd99f42d438560075ed36416d117c86dbf03f3f256ae949683b993faa3b56185f09cb058d363c30084e89c84e2acf0f8ef7ed7780deed6
- SSDEEP 768:tks+cAXJpB2TgpZnjJHk/OxJ+oFEZEM/4H:tjrAX5NjJHJ+oFE2M/4H
- TLSH T1D6A65C12ADE08537E0A241F019B39F3A7F7F3D2125669493D7E0ED2A7D70600AD1A76B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\VMIntel386 = "C:\\Windows\\Intelx386\\VMIntel386.exe 256mb 32bit" 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe - Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\Intelx386\Chenoa en cueros.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Mazinkaiser pack fondos de escritorio.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Pack Tonos y Logos para Nokia.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\WAV2MP3.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Matrix Wallpapers.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Terminator 3 Wallpapers.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Pack Photoshop CS 8 plugins.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\No lo Descargues.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\WinAce 3.85 (with Serial).exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\RealOne Player (Full version).exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Pack 50 Juegos PS2.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Pack 25 Juegos GameCube.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Resident Evil for GameCube.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\VirtualDub 2.1.4.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Juegos JAVA para NOKIA.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\GameCube Emulator.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\WinRar v6.11 (with crack).exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\DivX 7.2 freeware.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Silent Hill.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Lolita Pack 20 Pics.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\humor.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Hentai Shizuka clit.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\FlashGet Max acceleration (Experimental).exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Winamp 3.5 (full version).exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Hacha Profesional Edition.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Simpsons pack guiones (Temporada 2004).exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Mazinkaiser comics pack.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Visual C.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\BsPlayer v3.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\RM2GBA.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\GBAEmu.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Follada brutal coño roto.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Winamp 3 (full version).exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Capitulos ineditos de DragonBall Z jamas emitidos.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Dont Touch.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\WinRar 4 (with crack).exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\3D Studio R8 (It's Work!!).exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\MSN messenger 6.3.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Puta come mierda.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Visual Studio (full).exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Update Photoshop 7.0 to Photoshop 9.16 (It´s Work!).exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Nero 7.5.1.0 (cracked!).exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Visual Basic 6.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\mugen (full).exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Solo para Maricas.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Pack sex very hot nude young girl porn erotic private pussy rape clitoris suck chicas fotos culos tetas coños mamadas corridas sister hermana amigas friends lesbianas mujeres desnudas putas guarras hentai.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\German extreme violation.mpg.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Hentai Evangelion Poker.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\WinAmp skings and plugins.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Winamp 5.0 (full version).exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\3D Movie Maker.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Pedofilia pack 37 pics.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Dont Download.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Hentai.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Download Accelerator Plus (DAP) (full version with serial).exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\ContaWin 2000 (full version).exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Fuck my fat ass.avi.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Shinchan screen saver.scr 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\VMIntel386.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Update Photoshop 8.0 to Photoshop 9.5 (It´s Work!).exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\WinZip 9.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\PSEmu.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\Sexo con una menor.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe File created C:\Windows\Intelx386\a pelo.exe 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe"C:\Users\Admin\AppData\Local\Temp\11cb8faf02959768b9f4431b2569d8ed4075e8706354a18a8fb3f609e5d41324.exe"1⤵
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
PID:2100
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Windows\Intelx386\Update Photoshop 8.0 to Photoshop 9.5 (It´s Work!).exe
- Size 11.2MB
- SHA256 164ab640e89bbe0afdd6aa72b2672ca059ae6ffadc90137818dcb74dbe5bf832
- MD5 23ae79c3e8ebb1e472f7d0343d09309a
- SHA1 e15b4949023ab0820dc86149f7682f851b727946
- SHA512 570500ed393aba9e0e3b2ef5d5cada9820dd864a31369c6dfeb6330d166bdb61cd870ea29d8ea070851fd7b36ebdd4922a3eff107efe14cb8c80a83fd1fcd071
- SSDEEP 768:tks+cAXJpB2TgpZnjJHk/OxJ+oFEZEM/43:tjrAX5NjJHJ+oFE2M/43
- TLSH T1C7C65C12ADE08537E0A241F019B39F3A7F7F3D2125669493D7E0ED2A7D70600AD1A76B
- MD5 SHA1 SHA512 SSDEEP TLSH