Analysis

  • max time kernel
    150s
  • max time network
    129s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    01/10/2026, 17:29

General

  • Target
    Daemon.Tools.Pro.Advanced.v5.3.0.0359.exe
  • Size 8.7MB
  • Sample261001-v2mpxaself
  • SHA256 098d808c4303c3ce26cc69c60035a3c0178911fccda25c09101503c07cb9660a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 3 IoCs

    Detects file using ACProtect software.

  • Loads dropped DLL 3 IoCs
  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\Daemon.Tools.Pro.Advanced.v5.3.0.0359.exe
    "C:\Users\Admin\AppData\Local\Temp\Daemon.Tools.Pro.Advanced.v5.3.0.0359.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    PID:4152

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Aero.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsz8025.tmp\Aero.dll
        • Size 6KB
        • SHA256 b19961de6ca07e08704d6372718542f70dbbb203e59bf9bbe3a58f6e069a625c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsz8025.tmp\System.dll
        • Size 11KB
        • SHA256 7851cb12fa4131f1fee5de390d650ef65cac561279f1cfe70ad16cc9780210af
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nsDialogs.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsz8025.tmp\nsDialogs.dll
        • Size 9KB
        • SHA256 416133dd86c0dff6b0fcaf1f46dfe97fdc85b37f90effb2d369164a8f7e13ae6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/4152-6-0x0000000074414000-0x0000000074415000-memory.dmp

        memory/4152-14-0x0000000074330000-0x0000000074339000-memory.dmp

        memory/4152-15-0x0000000074410000-0x0000000074416000-memory.dmp

        memory/4152-24-0x0000000074330000-0x0000000074339000-memory.dmp