f50cea3ec67c1c693dd9c5321793dc104e7bcea733bb9e3996ad3e19677fa077

Analysis

max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/10/2026, 12:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
aas/aas_en.exe
Size 313KB
Sample261002-pmh6aaaa36
SHA256 f50cea3ec67c1c693dd9c5321793dc104e7bcea733bb9e3996ad3e19677fa077
MD5 b7faf87b392fc8e7c40e9c913316f5e4
SHA1 a62bf3d109e17d2324fa337bc560289d4be09973
SHA512 a8fbc794adfdf76c5a72d9c1ca6944b3b4b925d5d482e0d916b96e4edb3c14dcf154de2199eb301d3478f2f8d21585c4db89a5d3fd2643cb63bd03f6ab768ee0
SSDEEP 6144:7wOHiF+bqs7kRJVzHpJ9NnITVfsNM3ziKIgfqfR/UF/Eyel5fp:3HiFGqsorVzHjnSVfGMjifh5/UFRO5R
TLSH
T15A64126173C2D4B7D99A1471387E87AFCBB6FD081B506A136B64BF2FAC32149AC10526
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 2 IoCs

pid	Process
2300	aas_en.exe
2300	aas_en.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	aas_en.exe

C:\Users\Admin\AppData\Local\Temp\aas\aas_en.exe
"C:\Users\Admin\AppData\Local\Temp\aas\aas_en.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:2300

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

InstallOptions.dll

Path C:\Users\Admin\AppData\Local\Temp\nsl519.tmp\InstallOptions.dll
Size 14KB
SHA256 90485cb175686c3e97b32ebf99daa939c1a6f46e7031f71b72b81cd114fd5b51
MD5 271b5d1043c4402f08ddeae383f6979c
SHA1 2b88c58aa27bfb4979239579cd65d4c6c67a5295
SHA512 f8bd4b316726f05647162bb52a2aeb4a6cf5ee976fdb7817a3d25b868b83fb482c38d078f01d3a629afb0d6fa6ce409b2b3404398563137e22010074f529c11b
SSDEEP 192:i6JaVGQ+xI5EeuyvMmGpeWH2J5xprN+AxT3K72dwF7dBdcQOz:i6JaVh4I5rpPbT3+BdhO
TLSH
T1BD52395137C888F3E792053AB45237079B9D5226B8929ED1CA331FC62D2719E2FB1302
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StartMenu.dll

Path C:\Users\Admin\AppData\Local\Temp\nsl519.tmp\StartMenu.dll
Size 7KB
SHA256 abf56fe9b605c8cd716a2cc59b6ef052428753d5c716aaf857c3349d74fae66c
MD5 e98edd029f7f9f62ebb75992841817b8
SHA1 8a7054283e4386689a29c63f4e65f3ef1ea7c43f
SHA512 d6f3b151715a843a795f5a79931867031b2cc0c6406050f6af665fd07ba9d3b69557a09c720f88328b277fde0f47fffbb36a895196b7eb28d3c15ad0becc063a
SSDEEP 96:Z+dBC0x22epxPEvC4FkWE+in1/FMvsCGRfRFqCB5tlGhEl5VN:Z+/epxPE1r8/FtmCDtUg5v
TLSH
T115E1F87AF7C044F3D68B43702863BB17EB669A2117257163992716CAB5C24E3DC24722
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nsl519.tmp\ioSpecial.ini
Size 711B
SHA256 080493cbd1b85f60e58e6048e2a1d5a1ccd322ea9a1bb2968a70b002f2bb87f2
MD5 51fafc6b98ca00dc165dac7a1a2af7fc
SHA1 eaef3a8cf77d88de8131d5a8e3f2af8070051fed
SHA512 8d2750d312a3afe36c3b516cdd6e310635fa53e05273cd3d759194b0c774368593b2defcf06533ed746730058e3d537e038939352075c79a25687c6a5d6b3654
TLSH
T12F017089841FA325046051D664F93BA147E02C2C4B223DF6B093988AD34D9D38AEDDD6
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads