Overview
overview
3Static
static
3Max Payne ...e2.exe
windows10-2004-x64
3Max Payne ...e2.exe
windows11-ltsc_2024-x64
3Max Payne ...fc.dll
windows10-2004-x64
3Max Payne ...fc.dll
windows11-ltsc_2024-x64
3Max Payne 2/e2mfc.dll
windows10-2004-x64
3Max Payne 2/e2mfc.dll
windows11-ltsc_2024-x64
3Max Payne/...fc.dll
windows10-2004-x64
3Max Payne/...fc.dll
windows11-ltsc_2024-x64
3Max Payne/e2mfc.dll
windows10-2004-x64
3Max Payne/e2mfc.dll
windows11-ltsc_2024-x64
3Analysis
- max time kernel
149s - max time network
144s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
11/10/2026, 07:28
Static task
static1
Behavioral task
behavioral1
Sample
Max Payne 2/MaxPayne2.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
Max Payne 2/MaxPayne2.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
Max Payne 2/e2driver/e2_d3d8_driver_mfc.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
Max Payne 2/e2driver/e2_d3d8_driver_mfc.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
Max Payne 2/e2mfc.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
Max Payne 2/e2mfc.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
Max Payne/e2driver/e2_d3d8_driver_mfc.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
Max Payne/e2driver/e2_d3d8_driver_mfc.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
Max Payne/e2mfc.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
Max Payne/e2mfc.dll
Resource
win11ltsc2024-20260911-en
General
- Target Max Payne/e2driver/e2_d3d8_driver_mfc.dll
- Size 528KB
- Sample261011-jat45axycs
- SHA256 98bc8eed84074b55f1ea356deb9c612d45d5dd2bf3c5555d26054ae753891cd3
- MD5 c8bedd45549ee5b6c76cb2b565e1e876
- SHA1 74687215ade7e52cc982385591b7394c023b6e30
- SHA512 f6dbc7ce1d32e9b637158389e6ba13e4572e4c1454a36720f38f86547f9a7a90732aa9eb8ceb84eff3ac0ff0bdf47ee4a2c740606ed390ef1c8df785266005e7
- SSDEEP 12288:OLt6geT7W/43KOkQ03jcenTSth/IqXuhi9bkg3VtH:mT/43KOk93Iech/Iq19og3D
- TLSH T192B4AF91BB568025C87B60F6186C3B7F4FBC9B454F788BCB6ACCE92416F11E48636127
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language rundll32.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 1172 wrote to memory of 2116 1172 rundll32.exe 86
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\Max Payne\e2driver\e2_d3d8_driver_mfc.dll",#11⤵
- Suspicious use of WriteProcessMemory
PID:1172 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\Max Payne\e2driver\e2_d3d8_driver_mfc.dll",#12⤵
- System Location Discovery: System Language Discovery
PID:2116
-