9f7bfe82c8e62490836ee285ce9b6b34044358a2a299c55d1a1653e17f98728e

Analysis

max time kernel
152s
max time network
136s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/09/2026, 11:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Medal of Honour Allied Assault Single Player.exe
Size 175.2MB
Sample260919-m45phaed85
SHA256 9f7bfe82c8e62490836ee285ce9b6b34044358a2a299c55d1a1653e17f98728e
MD5 978b835086eb21c74282805f3f72ed10
SHA1 4a0c431ed52c4c340b9c883ef859f1d3e7e4ab2e
SHA512 908e3a501e669bce290d3d5bf1c738a05316b4fe454fc03b0ac9724575d13ce70def5e2eae0121eacdc96bb55656372658ec405669c964e45b9fcc4260e6776c
SSDEEP 3145728:MlhA1+9iJdfS6WwNnnb2f2gBd47s4llyiPPIM+5uMogPuoywa5HUrtvJFU:02EULzNb2f2E47flyiPgF5uMoUuvwa5V
TLSH
T1109833ECCE2B2956B637B1329900BF49E74C1651E7544C7AF3AFE25041C6AA37B50C8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
5264	Medal of Honour Allied Assault Single Player.exe

Drops file in System32 directory 1 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\GLBSINST.%$D	Medal of Honour Allied Assault Single Player.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Medal of Honour Allied Assault Single Player.exe

C:\Users\Admin\AppData\Local\Temp\Medal of Honour Allied Assault Single Player.exe
"C:\Users\Admin\AppData\Local\Temp\Medal of Honour Allied Assault Single Player.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
- System Location Discovery: System Language Discovery
PID:5264

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

GLC6E41.tmp

Path C:\Users\Admin\AppData\Local\Temp\GLC6E41.tmp
Size 150KB
SHA256 9acc324586a37cfa6f862439cfea45acd1378b4880b831cf5cca71389e0c5582
MD5 f3b9bfed127ffc97f63cd8c7ce8bc1a9
SHA1 468425842e3a29a4de6adb03652f02fdafd9fc82
SHA512 671828ffce8660e3326f63f4e6a80941bbacfaa13ded2d58e6ffeacf9501ee66683b70fa4a100bfe7d24aea6fee8c3eda0e9a6c5ecdd792f6febb1981be030ff
SSDEEP 3072:Db907noWMIh/cmdoUPkZpSt6ikpB9JBeft6EXo/JP7:tWo65cm6UPSFfpBstq
TLSH
T12AE37D0DB594813BD6D190BC657567B2ABBF58301BA95CC3DF201E892CB4AE7AD39303
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download