Analysis
- max time kernel
149s - max time network
140s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
30/09/2026, 12:19
General
- Target GalacticToolsV3.exe
- Size 17.2MB
- Sample260930-phktbavte1
- SHA256 202c71cccc63a9bad0c94b898a6447c2723724c7c534bfb7f2143eb6a50a2196
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Enumerates system info in registry 2 TTPs 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\GalacticToolsV3.exe"C:\Users\Admin\AppData\Local\Temp\GalacticToolsV3.exe"1⤵
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1976-0-0x00000000007D0000-0x0000000001902000-memory.dmp
memory/1976-1-0x0000000006AD0000-0x0000000007074000-memory.dmp
memory/1976-2-0x0000000006320000-0x00000000063B2000-memory.dmp
memory/1976-3-0x0000000006510000-0x0000000006520000-memory.dmp
memory/1976-4-0x00000000062E0000-0x00000000062FA000-memory.dmp
memory/1976-5-0x0000000006440000-0x000000000644A000-memory.dmp
memory/1976-6-0x0000000006710000-0x0000000006906000-memory.dmp
memory/1976-7-0x0000000009B20000-0x0000000009BD2000-memory.dmp
memory/1976-8-0x0000000006510000-0x0000000006520000-memory.dmp
memory/1976-9-0x0000000006510000-0x0000000006520000-memory.dmp
memory/1976-10-0x0000000006510000-0x0000000006520000-memory.dmp