Analysis
- max time kernel
1s - max time network
42s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
23/10/2026, 23:34
General
- Target E68EA8E59C9FE69CBAE694BBE9809F_E697A0E99990E68EA8_.exe
- Size 27.7MB
- Sample261023-3kshtsv13m
- SHA256 de73ce653942dbcd23db5135c905f86495f813de6abf71efa317ae8ff1e802d7
Malware Config
Signatures
- Embeds OpenSSL 1 IoCs
Embeds OpenSSL, may be used to circumvent TLS interception.
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\E68EA8E59C9FE69CBAE694BBE9809F_E697A0E99990E68EA8_.exe"C:\Users\Admin\AppData\Local\Temp\E68EA8E59C9FE69CBAE694BBE9809F_E697A0E99990E68EA8_.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
-
C:\ÍÆÍÁ»ú¹¥ËÙ[ÎÞÏÞÍÆ]\719f7dc0.exeC:\ÍÆÍÁ»ú¹¥ËÙ[ÎÞÏÞÍÆ]\719f7dc0.exe 0|1756|C:\Users\Admin\AppData\Local\Temp\E68EA8E59C9FE69CBAE694BBE9809F_E697A0E99990E68EA8_.exe2⤵
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
719f7dc0.exe
719f7dc0.exe
ESP-B.DAT
MapDesc1.dat
MapDesc2.dat
SDC.dat
igamesdk32.dll
libcrypto-3.dll
libcrypto-3.dll
libssl-3.dll
memory/1756-20-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/1756-8-0x0000000000AF4000-0x0000000000B04000-memory.dmp
memory/1756-12-0x00000000034E0000-0x00000000036F3000-memory.dmp
memory/1756-15-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/1756-17-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/1756-14-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/1756-18-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/1756-19-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/1756-0-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/1756-21-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/1756-22-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/1756-23-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/1756-25-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/1756-26-0x00000000034E0000-0x00000000036F3000-memory.dmp
memory/1756-11-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/1756-28-0x00000000034E0000-0x00000000036F3000-memory.dmp
memory/1756-33-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/1756-1-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/1756-31-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/1756-32-0x0000000000AF4000-0x0000000000B04000-memory.dmp
memory/1756-2-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/1756-3-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/1756-5-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/1756-6-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/1756-4-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/1756-7-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/1756-10-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/1756-13-0x00000000034E0000-0x00000000036F3000-memory.dmp
memory/4792-56-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/4792-55-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/4792-52-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/4792-54-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/4792-49-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/4792-51-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/4792-73-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/4792-78-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/4792-83-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/4792-89-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/4792-91-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/4792-50-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/4792-47-0x0000000003450000-0x0000000003663000-memory.dmp
memory/4792-93-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/4792-92-0x0000000003450000-0x0000000003663000-memory.dmp
memory/4792-44-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/4792-40-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/4792-41-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/4792-42-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/4792-53-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/4792-46-0x0000000003450000-0x0000000003663000-memory.dmp
memory/4792-45-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/4792-39-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/4792-36-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/4792-34-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/4792-37-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/4792-38-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/4792-98-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/4792-35-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/4792-103-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/4792-104-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/4792-109-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/4792-110-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/4792-111-0x0000000000400000-0x0000000000D19000-memory.dmp
memory/4792-112-0x0000000003450000-0x0000000003663000-memory.dmp
memory/4792-113-0x0000000003450000-0x0000000003663000-memory.dmp
memory/4792-114-0x0000000003450000-0x0000000003663000-memory.dmp