Analysis
- user interaction
yes - max time kernel
149s - max time network
137s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
14/10/2026, 22:27
General
- Target daemon-tools-4-46-1-lite-es-en-br-fr-de-it-cn-jp-win.exe
- Size 13.4MB
- Sample261014-2c2wvsad46
- SHA256 e5c85ecbb78cd05bb76ae808cf8649711214c37bfc309d019e8229edcb2741ea
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\daemon-tools-4-46-1-lite-es-en-br-fr-de-it-cn-jp-win.exe"C:\Users\Admin\AppData\Local\Temp\daemon-tools-4-46-1-lite-es-en-br-fr-de-it-cn-jp-win.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\pcaui.exe"C:\Windows\system32\pcaui.exe" -g {11111111-1111-1111-1111-111111111111} -x {60fdc094-58fa-41d5-bd57-5c9bd53e8d92} -a "Daemon Tools" -v "DT Soft Ltd." -s "This app can't run because it causes security or performance issues on Windows. A new version may be available. Check with your software provider for an updated version that runs on this version of Windows." -n 2 -f 616281 -k 0 -e "C:\Users\Admin\AppData\Local\Temp\daemon-tools-4-46-1-lite-es-en-br-fr-de-it-cn-jp-win.exe"2⤵
-