Overview
overview
8Static
static
3Decanta-Setup.exe
windows10-2004-x64
7Decanta-Setup.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows11-ltsc_2024-x64
3Desinstaller.exe
windows10-2004-x64
8Desinstaller.exe
windows11-ltsc_2024-x64
8$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows11-ltsc_2024-x64
3decanta.exe
windows10-2004-x64
6decanta.exe
windows10-2004-x64
6Analysis
- max time kernel
150s - max time network
113s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/09/2026, 13:11
Static task
static1
Behavioral task
behavioral1
Sample
Decanta-Setup.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
Decanta-Setup.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
Desinstaller.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
Desinstaller.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
decanta.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
decanta.exe
Resource
win10v2004-20260911-en
General
- Target Decanta-Setup.exe
- Size 11.4MB
- Sample260924-qe4mpaec97
- SHA256 382ed12f391f845ae4b7aa7b08115826dfd82df8171180f2911b3a395fdee2b4
- MD5 49ad4015a27f8c80abf521273578ebb4
- SHA1 4d666e75cd6d1fbcb755bd61d7735951ef0f8954
- SHA512 147aa3920847891222d6a193f30d3ae60176bb2c62b5d4b1977ee2417b61cf29f4b9a61474fd9d37bc54a779a7fd3ef7385dd3dc2b79f6b91508225dfc0579d9
- SSDEEP 196608:vyCeTWkH3qVSNK0+BhRDVH+bHXKjXWdnHuCGXjWcwdZzOJSu+CbGXqs15v+915DE:KCvkXqVB0+BhPH+b3KLWdHeS/CExqCBH
- TLSH T12DC633E5B7C14492CBF444303366F63E448AAF6A2AEB1F4B5356DB38CD39379A764210
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
pid Process 5956 Decanta-Setup.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Decanta-Setup.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\nskF342.tmp\System.dll
- Size 28KB
- SHA256 b89448b9fd7be5ef215cac6d973a57c0e75e1fffa25552afe174855c9b71fdf9
- MD5 81e34f1c4b04a15dbce200c52f598f67
- SHA1 f40a922ad7a5494e2aeeaa2b961d96738e888af7
- SHA512 577f52a292075269f0e8ec4c6d243b2ed411872e009839553020929a8263174ad97943f150543e4ea6cb327d95e227f4065441a9d2106b7cabf1cb872dbcc181
- SSDEEP 384:xmEs6sVqQq0DwRiGUaLYuAXLaMoy4m973uwYkvZ6YfkzB8yy1Eiu8ILvFd/9:xmEwqZ2wRiGUcY8TBsdvEbB8yyvIJ
- TLSH T1DFD20A2AFF06C8F2D1B1D570889EE677C526782957220E7BFF1B9E4CFC236825A19105
- MD5 SHA1 SHA512 SSDEEP TLSH