Overview
overview
7Static
static
3GoldMinerRA.exe
windows10-2004-x64
7GoldMinerRA.exe
windows11-ltsc_2024-x64
7Keygen.exe
windows10-2004-x64
3Keygen.exe
windows11-ltsc_2024-x64
3ReflexiveArcade.exe
windows10-2004-x64
3ReflexiveArcade.exe
windows11-ltsc_2024-x64
3ReflexiveA...de.dll
windows10-2004-x64
3ReflexiveA...de.dll
windows11-ltsc_2024-x64
3unins000.exe
windows10-2004-x64
7unins000.exe
windows11-ltsc_2024-x64
7Analysis
- max time kernel
148s - max time network
140s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
25/09/2026, 17:34
Static task
static1
Behavioral task
behavioral1
Sample
GoldMinerRA.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
GoldMinerRA.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
Keygen.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
Keygen.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
ReflexiveArcade.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
ReflexiveArcade.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
ReflexiveArcade/ReflexiveArcade.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
ReflexiveArcade/ReflexiveArcade.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
unins000.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
unins000.exe
Resource
win11ltsc2024-20260911-en
General
- Target Keygen.exe
- Size 110KB
- Sample260925-v5f2jasdka
- SHA256 46078d90c49820c757010554a1b308d2189fa3adeb10a80ed02ee07fae1279c3
- MD5 8d3297d01309c82ea054a0b489e93531
- SHA1 47cf6b9631034a8c583cd0c67555d70d88e99ac5
- SHA512 725025a2031b4bd13132241d9e12a35e0a01137fdf0292570e0eb7019b44d039c39352a3c81e6f0c75b98533cbbf36d46b62dc4f6321909197afd6d56c6dfe28
- SSDEEP 3072:2EG/OyzqDxrgPrn9yBbs+qcdUlNBeGCYlHB9PWg3N8L5Ku5B:2v/OyzAkP7isCWNQGCS9PLNa
- TLSH T1ABB302E97E521CE4C6546BF4FC8A2ED197763246A71306391E94F90DE42233B3972C4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Keygen.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 5424 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 5424 AUDIODG.EXE
Processes
-
C:\Users\Admin\AppData\Local\Temp\Keygen.exe"C:\Users\Admin\AppData\Local\Temp\Keygen.exe"1⤵
- System Location Discovery: System Language Discovery
PID:2732
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x000000000000048C 0x00000000000004F81⤵
- Suspicious use of AdjustPrivilegeToken
PID:5424