Analysis
- max time kernel
148s - max time network
151s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
04/11/2026, 03:37
General
- Target D300I-CSR011414-BW256B-EN-261023-GD427-Updater/._cache_D300I-CSR011414-BW256B-EN-261023-GD427-Updater.exe
- Size 972KB
- Sample261104-d6mr2acc66
- SHA256 cf0a70575a4a92f70e990dd4849b1d47b7fe5a4dd524f0d3067448a318177844
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\D300I-CSR011414-BW256B-EN-261023-GD427-Updater\._cache_D300I-CSR011414-BW256B-EN-261023-GD427-Updater.exe"C:\Users\Admin\AppData\Local\Temp\D300I-CSR011414-BW256B-EN-261023-GD427-Updater\._cache_D300I-CSR011414-BW256B-EN-261023-GD427-Updater.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/6092-0-0x0000000074D82000-0x0000000074D83000-memory.dmp
memory/6092-1-0x0000000000E00000-0x0000000000EFA000-memory.dmp
memory/6092-2-0x0000000005EB0000-0x000000000646A000-memory.dmp
memory/6092-3-0x00000000058F0000-0x0000000005982000-memory.dmp
memory/6092-4-0x0000000005870000-0x0000000005886000-memory.dmp
memory/6092-5-0x0000000005D50000-0x0000000005D5A000-memory.dmp
memory/6092-6-0x0000000074D70000-0x000000007552C000-memory.dmp
memory/6092-7-0x0000000005D60000-0x0000000005D6E000-memory.dmp
memory/6092-8-0x0000000074D70000-0x000000007552C000-memory.dmp
memory/6092-9-0x0000000074D82000-0x0000000074D83000-memory.dmp
memory/6092-10-0x0000000074D70000-0x000000007552C000-memory.dmp
memory/6092-11-0x0000000074D70000-0x000000007552C000-memory.dmp
memory/6092-12-0x0000000074D70000-0x000000007552C000-memory.dmp
memory/6092-13-0x0000000074D70000-0x000000007552C000-memory.dmp
memory/6092-14-0x0000000074D70000-0x000000007552C000-memory.dmp
memory/6092-15-0x0000000074D70000-0x000000007552C000-memory.dmp
memory/6092-16-0x0000000074D70000-0x000000007552C000-memory.dmp