1bbbd8b231f7d8f8dca7dfded5cd7908427f68db49edad24ec5fa21c9cbab0f7

Analysis

max time kernel
300s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/10/2026, 18:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
uuyc_4.34.0.exe
Size 138.0MB
Sample261003-ww2gjswtfx
SHA256 1bbbd8b231f7d8f8dca7dfded5cd7908427f68db49edad24ec5fa21c9cbab0f7
MD5 db3c7931ad9798be58671cb06b8789b2
SHA1 8dcce5c4914c8300cf1afe0afcc7d241130f70f7
SHA512 acfe684ee400595de1c81402ba76d5514d9465fdc54d4dcc22266bc46d45cb2d55425ddca017f5be2d2c82d3579abf755032510ad0dde73c2b4a42a2ffed52cd
SSDEEP 3145728:x4+N6QEdBlw1hylJC8l62MLdgVbLu8bEkuDvh8IRz/R911QlRkCFS5kpbVb0NONn:agWLMylJPGglgZDvKIdJ91aP7UGpbCNw
TLSH
T1B36833297043DE77E0302E79178BFAF6A266BC380FADE64540C67B4B617126CD8235D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
2440	uuyc_4.34.0.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	uuyc_4.34.0.exe

C:\Users\Admin\AppData\Local\Temp\uuyc_4.34.0.exe
"C:\Users\Admin\AppData\Local\Temp\uuyc_4.34.0.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:2440

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

InstallOptions.dll

Path C:\Users\Admin\AppData\Local\Temp\nse262E.tmp\InstallOptions.dll
Size 14KB
SHA256 1a0f7da84f2eaefd5bf89058066ff12d6fdf9e06c847587dba13fb9ddc6190dd
MD5 f5a23865d9565d4641effb667f8e73b1
SHA1 76bcc3a439842a329ab3512b3246b016201af1bc
SHA512 73e65b57a8bbd0ccbe0d4a2b4e907f6fff11a09b5ed8fe48d115c3cebae793ede78b14b3d5393cc64644c8bcc08294361cf149a28729c213b6bf287cda195534
SSDEEP 192:G4n3T5aK+dHCMR1aQR9RuZl3WWmU7WYZsw1JpVGnrj9K72dwF7dBOne:nn3T5KdHCMRD/R1cOnrj9+BO
TLSH
T190622B55738488F3DBD2003E785237079B995565B4929ED2CE275FC6687B08D7EB2303
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nse262E.tmp\ioSpecial.ini
Size 628B
SHA256 2c2aef63914042877d595cd36f54e730558797346e39b91b958b2415add63ac0
MD5 0ad25e62b40b09c6d148743778fd1cfc
SHA1 707e2690e63d70e2773f78c68c4e705b1e71f910
SHA512 ab6ffd7bdb7e0c96db16a8be8d0e54eb29c0e8bd3664d0cbafe9c89ee41d10f57ae5e72409d3ab6ca88f7cce7389f852dbc7b7a13dd1b4d66a7b2a8fb808e1ed
TLSH
T143F00249008E822E94359093857A7F9517F12D600B0839F0B9320C879FCCCE9C8CC982
MD5 SHA1 SHA512 TLSH