790ce78f05a97b590552d350063a830e11891378981efd0f41d663c3ebee19bf

Analysis

max time kernel
149s
max time network
136s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/10/2026, 18:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Setup.exe
Size 1.1MB
Sample261029-wrtadadw2v
SHA256 790ce78f05a97b590552d350063a830e11891378981efd0f41d663c3ebee19bf
MD5 3a9975d3a693418e785d3dba401e23a5
SHA1 0e52ebfe2a3f861a67e296d1be86d537787405e8
SHA512 9101871637c8929bd4d2ea5b3f4f301740a25c58cf583abb706df6915715d3a1e1d53bec7aaddd3ba9377559de0613223fc01eb90437642ab22b3451173e7bb0
SSDEEP 24576:aGqn++MsJsAbvGo0mwJ/2b53C/DvPw1k5Z5mvUyGself8hc:aZ/MysADORJeS/jw1k8UyGFd
TLSH
T18435239A6483D2E3D06D15B999E09D1A8B35CD972522CBABBF06F4CD9F766C00D3301B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
4800	Setup.exe

Enumerates connected drives 3 TTPs 2 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\A:	Setup.exe
File opened (read-only)	\??\B:	Setup.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Setup.exe

C:\Users\Admin\AppData\Local\Temp\Setup.exe
"C:\Users\Admin\AppData\Local\Temp\Setup.exe"
1⤵
- Loads dropped DLL
- Enumerates connected drives
- System Location Discovery: System Language Discovery
PID:4800

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

English.vlg

Path C:\Users\Admin\AppData\Local\Temp\~vis0000\English.vlg
Size 10KB
SHA256 920d6ea0fb774d0ee065739ad1aff269f98ae55d01a77bb2080e55a2be75f9a3
MD5 2f5fd0039e54e90d8c77020094ba5835
SHA1 4b5633c2de8cabe1a0f62ba8a5289c073326b31f
SHA512 f29f19926446d633f46b2e37e57680c71a2cdbd465b5c2d2955a4afa694b0d967024b24283af99a7321b74c2874c2ddd287e524af6d3062420b83102b997f90d
SSDEEP 192:jOn8Q8jnmPaYvSisZ4Txyvn+2Hbg4bi5FrTZklXORv5Z+sTzjTYY8s5Awvu:jOnwj6vonLYXklXOBZ+sTzjchsY
TLSH
T14D22C78D8A39C369E9B0964FC24D13CB99C1C38B716A77C09CD4B4F1AB982ED07C7589
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.bmp

Path C:\Users\Admin\AppData\Local\Temp\~vis0000\default.bmp
Size 18KB
SHA256 d9d5e28eb445e7986bdef4d409868af205d525f2f0729427dfe3e33a7251b15d
MD5 f372b11ff99bffed4cd279c0155adede
SHA1 89cbf60925076e9a14fd48b13790422b43a5b989
SHA512 e902f0d7ff0e2af64ce3e8ae6d704ec21b04b35ac3f25a9acd53938b3b66fbaa02b25e816202f165e2d7339b62d2cd6fe9f764d64eefd5b24d1a108cb4b2679f
SSDEEP 48:gqPrH9b8On073Nbk4HvZ/vzjv6UqZf48jYrwtPE4aODu1jqngAz7l3jdK:gqDHeR3uYh/vmfVjY2PEXg7l3xK
TLSH
T1F382681B2149361926ED6A225629AFECC411DE4B017C99FDD43BF73742B096ACE3740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vise32ex.dll

Path C:\Users\Admin\AppData\Local\Temp\~vis0000\vise32ex.dll
Size 496KB
SHA256 d5e0c8cbe9e0c274260f6c8484dcdfd7cb5ba9ef094f3f7a7951bb4b92bc2193
MD5 ec6736ff6e49d30c998de60055aa7819
SHA1 f8c729e7cb896286e364b9fccc227298effb4e9e
SHA512 58d3f0df653cd83ba63bc46adeff587f736d79ab7f275d03bfb1aa4709afae0ef456a1e2597e407ef07e67ae84a9689184fbde8d4a7964716a14f21f865e9d8a
SSDEEP 12288:Ibyt0WsROjuYUM7sSm4GVv/5er2jlOZNsZ4:cyt0RdQo56WUZWZ4
TLSH
T1E3B48D50AA56B8BDD15CF5B8209E7B352E3ACF44423A87C3D375DC366D21281AE3930E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads