f99cacff4ba70c2822a37c1a9b66143ce34463c07ca4da3399c5e041ea93e804

Analysis

max time kernel
149s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 06:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jave/jane.v1.81.setup.exe
Size 1010KB
Sample261002-g4xe8ssapc
SHA256 f99cacff4ba70c2822a37c1a9b66143ce34463c07ca4da3399c5e041ea93e804
MD5 7a1449b137c9971bab28684cbff87db1
SHA1 9de7068fe34a583b291c335d02d275148307bd08
SHA512 ac8388d6e67a9a0df0da2b34f5879f9e13c65002117784ca85b52ee5606df0302ba6b0c84f2428353c65a8a4849fdf86691fc2a4cb31a9b8a9ff922ba72897e3
SSDEEP 24576:I4sT06gHMQFxcFyZh0wkY9EZvGaOcsIva7vtt1g1vT:Vz6gHt8wkl8aOCCbT1MvT
TLSH
T1192523A63240FA56C9711471E862D6F647A57CA3C2244387378C3F6D7E3BCC2D927299
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 3 IoCs

pid	Process
3596	jane.v1.81.setup.exe
3596	jane.v1.81.setup.exe
3596	jane.v1.81.setup.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jane.v1.81.setup.exe

C:\Users\Admin\AppData\Local\Temp\jave\jane.v1.81.setup.exe
"C:\Users\Admin\AppData\Local\Temp\jave\jane.v1.81.setup.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:3596

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

InstallOptions.dll

Path C:\Users\Admin\AppData\Local\Temp\nsdBF17.tmp\InstallOptions.dll
Size 15KB
SHA256 44b1d70219f88564d94da9fc8a7ca4d25d103575519c84a44df3057b8af98f71
MD5 cfc7c53e282b0a7c527e4ed091f17fcd
SHA1 3f3fb2dfaa9a0576803c5fd693f5c4c288ae4f1e
SHA512 367fc4024397381cfc5fa83b303d5eb78e97904821260589ce81a51c3cbe5d7f5dd0bf7fa07142bcb13a91bce2b523de21cbb1d940cb7fdfeca35c54c67694f6
SSDEEP 192:EhGQtZkTktEQUrJaZfuyCnSmUsv3sY7L7cW8Y6Q86QvoTmT11929WtshLAzgSrX8:EhNt+4t7uJalUnGesY7Lt8nCy/Yosa
TLSH
T162624D1137D598B3E2E62A797EF377138FA5F722A4428E0BC7332E0638565806D78311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StartMenu.dll

Path C:\Users\Admin\AppData\Local\Temp\nsdBF17.tmp\StartMenu.dll
Size 7KB
SHA256 fe330320459637d8dd2b5d84d07925c38ec264152ffd3b1760a4d44d76536caa
MD5 b9b71990b37e04a56cadbcbfa694f30f
SHA1 3b7627deb793446d6b12b7b94266cc592982a5c2
SHA512 b4aa947aba471ce0ba37ab859391f6a157887c882c920a3081d482f63a83317ae75b428ebae226f835798517abb676114ee42bf13bd4c4291cebbb5e9658f2e5
SSDEEP 96:VIt3J2Gl0eVe0+Cfo0UkXt6+o69UiGdPh5/utta/x3lkCTcaqHCI:ShE+A0+sF6piUFkA1lncviI
TLSH
T1FFF1C776F3D20673F9AB427428632F231B2AF521576581A7890316CE7A61DE3FD34B11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nsdBF17.tmp\ioSpecial.ini
Size 778B
SHA256 93ddb5733d0cd1e48be667ab4ffcac694e289bcabf284050f1271901f3d51191
MD5 7b9269b65a7af3ea69dca6d7f8284ee5
SHA1 8afaa60344df5d206d0cc457ef78cf704c518592
SHA512 30996bac460b49b8fc4d0886aa5db6f88caa9b768b1ea7fe897b8b9e89dd1af4842f67e53fc6eb36172ba3c650a6f38077257f2c5d54d74acdbb735210380656
TLSH
T17A01A9133AF84014E1BBF608FFF5807997397851881EC91E80D10A0F88E57808567BEF
MD5 SHA1 SHA512 TLSH

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nsdBF17.tmp\ioSpecial.ini
Size 1KB
SHA256 11e97845ba7800630090853d071891fdf9023f4d27d1c95072235ec67746e6ae
MD5 cded0a3f26196633512ae51b1983ed40
SHA1 0112ec25a8d7c45599b3990e87c789856fdaf268
SHA512 3b24068d1b2a9f73ac4e0f302e0b4fcce5881587873a5a79f4b321178af6168dff2204deb1ec118d315411f04a275173dcb4665f91d4c3d45eb5cdfc9dd69dd4
TLSH
T17741C2133AF81214F2BBB718FFB551749B3A7C56983CC65D81D00A0E48E6B808567BAB
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads