f99cacff4ba70c2822a37c1a9b66143ce34463c07ca4da3399c5e041ea93e804

Analysis

max time kernel
150s
max time network
129s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/10/2026, 06:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jave/jane.v1.81.setup.exe
Size 1010KB
Sample261002-g4xe8ssapc
SHA256 f99cacff4ba70c2822a37c1a9b66143ce34463c07ca4da3399c5e041ea93e804
MD5 7a1449b137c9971bab28684cbff87db1
SHA1 9de7068fe34a583b291c335d02d275148307bd08
SHA512 ac8388d6e67a9a0df0da2b34f5879f9e13c65002117784ca85b52ee5606df0302ba6b0c84f2428353c65a8a4849fdf86691fc2a4cb31a9b8a9ff922ba72897e3
SSDEEP 24576:I4sT06gHMQFxcFyZh0wkY9EZvGaOcsIva7vtt1g1vT:Vz6gHt8wkl8aOCCbT1MvT
TLSH
T1192523A63240FA56C9711471E862D6F647A57CA3C2244387378C3F6D7E3BCC2D927299
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 3 IoCs

pid	Process
5348	jane.v1.81.setup.exe
5348	jane.v1.81.setup.exe
5348	jane.v1.81.setup.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jane.v1.81.setup.exe

C:\Users\Admin\AppData\Local\Temp\jave\jane.v1.81.setup.exe
"C:\Users\Admin\AppData\Local\Temp\jave\jane.v1.81.setup.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:5348

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

InstallOptions.dll

Path C:\Users\Admin\AppData\Local\Temp\nsyAD6.tmp\InstallOptions.dll
Size 15KB
SHA256 44b1d70219f88564d94da9fc8a7ca4d25d103575519c84a44df3057b8af98f71
MD5 cfc7c53e282b0a7c527e4ed091f17fcd
SHA1 3f3fb2dfaa9a0576803c5fd693f5c4c288ae4f1e
SHA512 367fc4024397381cfc5fa83b303d5eb78e97904821260589ce81a51c3cbe5d7f5dd0bf7fa07142bcb13a91bce2b523de21cbb1d940cb7fdfeca35c54c67694f6
SSDEEP 192:EhGQtZkTktEQUrJaZfuyCnSmUsv3sY7L7cW8Y6Q86QvoTmT11929WtshLAzgSrX8:EhNt+4t7uJalUnGesY7Lt8nCy/Yosa
TLSH
T162624D1137D598B3E2E62A797EF377138FA5F722A4428E0BC7332E0638565806D78311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StartMenu.dll

Path C:\Users\Admin\AppData\Local\Temp\nsyAD6.tmp\StartMenu.dll
Size 7KB
SHA256 fe330320459637d8dd2b5d84d07925c38ec264152ffd3b1760a4d44d76536caa
MD5 b9b71990b37e04a56cadbcbfa694f30f
SHA1 3b7627deb793446d6b12b7b94266cc592982a5c2
SHA512 b4aa947aba471ce0ba37ab859391f6a157887c882c920a3081d482f63a83317ae75b428ebae226f835798517abb676114ee42bf13bd4c4291cebbb5e9658f2e5
SSDEEP 96:VIt3J2Gl0eVe0+Cfo0UkXt6+o69UiGdPh5/utta/x3lkCTcaqHCI:ShE+A0+sF6piUFkA1lncviI
TLSH
T1FFF1C776F3D20673F9AB427428632F231B2AF521576581A7890316CE7A61DE3FD34B11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nsyAD6.tmp\ioSpecial.ini
Size 1KB
SHA256 3125e05e84030279bc7fcc89636d541b0a65e9fdd341b66de61c58eb3cdcc93e
MD5 c9fb570c66574cc71f0a36ac75fa63c0
SHA1 8a16416e859bd8f042fb0fed71f0e85609047c7d
SHA512 85a11fbef0456277da24cab0f178ba43e7242208b9ca74708f5c81c850e8b0b4ced99f142555778bf9c9ac7b69cab50f4b43546cbcfd838ad33dd404f2a885ab
TLSH
T1E741C0133AFC1214F2BBB718FFB551749B3A7C56983CC65D81D00A0E48E6B808567BAB
MD5 SHA1 SHA512 TLSH

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nsyAD6.tmp\ioSpecial.ini
Size 1KB
SHA256 02babde71d3c67b86cef3d2295e96d063acce4a7675250043d3466887e2d1273
MD5 c6e0479fc19feeda6069b876feb47130
SHA1 3c5fc7040c61e31c365ead486cefcdb8ee43b0e4
SHA512 dbf09c932e33e07177622ebf7d377c6485ced605f5190f5b6a7680e9c9f2881fd5a3daf6625ed607de378baed7dffcd29cc556f7a400ad3974765cff8c8a73bc
TLSH
T17941C4133AFD1614F2BBB618FFB54178573A7C56983CC55D91D00A0F08E6A808967BAB
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads