Overview
overview
8Static
static
8MathType-w...om.exe
windows10-2004-x64
8MathType-w...om.exe
windows11-ltsc_2024-x64
8$LOCALAPPD...qn.doc
windows10-2004-x64
1$LOCALAPPD...qn.doc
windows11-ltsc_2024-x64
1$LOCALAPPD...32.dll
windows10-2004-x64
3$LOCALAPPD...32.dll
windows11-ltsc_2024-x64
3$LOCALAPPD...32.dll
windows10-2004-x64
3$LOCALAPPD...32.dll
windows11-ltsc_2024-x64
3$LOCALAPPD...age.js
windows10-2004-x64
3$LOCALAPPD...age.js
windows11-ltsc_2024-x64
3$LOCALAPPD...ib.exe
windows10-2004-x64
3$LOCALAPPD...ib.exe
windows11-ltsc_2024-x64
3$LOCALAPPD...hML.js
windows10-2004-x64
3$LOCALAPPD...hML.js
windows11-ltsc_2024-x64
3$LOCALAPPD...cy.jar
windows10-2004-x64
1$LOCALAPPD...cy.jar
windows11-ltsc_2024-x64
1$LOCALAPPD...32.dll
windows10-2004-x64
3$LOCALAPPD...32.dll
windows11-ltsc_2024-x64
3$LOCALAPPD...32.jar
windows10-2004-x64
1$LOCALAPPD...32.jar
windows11-ltsc_2024-x64
1$LOCALAPPD...wt.dll
windows10-2004-x64
3$LOCALAPPD...wt.dll
windows11-ltsc_2024-x64
3$LOCALAPPD...ts.jar
windows10-2004-x64
1$LOCALAPPD...ts.jar
windows11-ltsc_2024-x64
1$LOCALAPPD...tn.exe
windows10-2004-x64
3$LOCALAPPD...tn.exe
windows11-ltsc_2024-x64
3$LOCALAPPD...pr.dll
windows10-2004-x64
3$LOCALAPPD...pr.dll
windows11-ltsc_2024-x64
3$LOCALAPPD...er.dll
windows10-2004-x64
3$LOCALAPPD...er.dll
windows11-ltsc_2024-x64
3$LOCALAPPD...sc.dll
windows10-2004-x64
3$LOCALAPPD...sc.dll
windows11-ltsc_2024-x64
3Analysis
- max time kernel
148s - max time network
129s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/09/2026, 15:51
Behavioral task
behavioral1
Sample
MathType-win-en-7.8.0.0_softoroom.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
MathType-win-en-7.8.0.0_softoroom.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
$LOCALAPPDATA/Temp/mathtype.tmp/BlankEqn.doc
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
$LOCALAPPDATA/Temp/mathtype.tmp/BlankEqn.doc
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
$LOCALAPPDATA/Temp/mathtype.tmp/JAWTAccessBridge-32.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
$LOCALAPPDATA/Temp/mathtype.tmp/JAWTAccessBridge-32.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
$LOCALAPPDATA/Temp/mathtype.tmp/JavaAccessBridge-32.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
$LOCALAPPDATA/Temp/mathtype.tmp/JavaAccessBridge-32.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
$LOCALAPPDATA/Temp/mathtype.tmp/MathPage.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
$LOCALAPPDATA/Temp/mathtype.tmp/MathPage.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
$LOCALAPPDATA/Temp/mathtype.tmp/MathTypeLib.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
$LOCALAPPDATA/Temp/mathtype.tmp/MathTypeLib.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
$LOCALAPPDATA/Temp/mathtype.tmp/PMathML.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
$LOCALAPPDATA/Temp/mathtype.tmp/PMathML.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
$LOCALAPPDATA/Temp/mathtype.tmp/US_export_policy.jar
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
$LOCALAPPDATA/Temp/mathtype.tmp/US_export_policy.jar
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
$LOCALAPPDATA/Temp/mathtype.tmp/WindowsAccessBridge-32.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
$LOCALAPPDATA/Temp/mathtype.tmp/WindowsAccessBridge-32.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
$LOCALAPPDATA/Temp/mathtype.tmp/access-bridge-32.jar
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
$LOCALAPPDATA/Temp/mathtype.tmp/access-bridge-32.jar
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
$LOCALAPPDATA/Temp/mathtype.tmp/awt.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
$LOCALAPPDATA/Temp/mathtype.tmp/awt.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
$LOCALAPPDATA/Temp/mathtype.tmp/charsets.jar
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
$LOCALAPPDATA/Temp/mathtype.tmp/charsets.jar
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
$LOCALAPPDATA/Temp/mathtype.tmp/copybtn.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
$LOCALAPPDATA/Temp/mathtype.tmp/copybtn.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
$LOCALAPPDATA/Temp/mathtype.tmp/dcpr.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
$LOCALAPPDATA/Temp/mathtype.tmp/dcpr.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
$LOCALAPPDATA/Temp/mathtype.tmp/fontmanager.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
$LOCALAPPDATA/Temp/mathtype.tmp/fontmanager.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
$LOCALAPPDATA/Temp/mathtype.tmp/j2pcsc.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
$LOCALAPPDATA/Temp/mathtype.tmp/j2pcsc.dll
Resource
win11ltsc2024-20260911-en
General
- Target $LOCALAPPDATA/Temp/mathtype.tmp/copybtn.exe
- Size 54KB
- Sample260930-tagtxayfpd
- SHA256 2d00c4d663072191cf4817f2ffb5388fdf01095cd2685797bacdea48c3fac055
- MD5 fdddeafd333083c2e839bd1af02843e4
- SHA1 80f5b641372c8de38b9db54b5a31f773bae4d551
- SHA512 3ba6d417d3d0bb63d05b790cbb72c21a4bb50cd193f7a27cb6bd37e5127a17eaea16ee16b3f10c9efadc1fa8248ab69b6182f9cb570f469a88635480cb001fcd
- SSDEEP 384:aWEh0851UQlBMWDCd3RU6DDaLq93fqeyiES9EglonReRxsYkz38s8cn/fuSPLmFn:uh08LUQ7MWm86VCeLruglonRe/ehd/+Z
- TLSH T1A5433932EDA75312D8C275B08AB48EC6373B7A113AF0442B96D45B4B2F665F2DD15338
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language copybtn.exe