9771d7d0d06a4aa2c469b7c765c0687164d28f4fa1ad1b8874f6ad6f0596eb0a

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
13/11/2026, 00:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Bugasys.exe
Size 15.4MB
Sample261113-anmsjad14t
SHA256 9771d7d0d06a4aa2c469b7c765c0687164d28f4fa1ad1b8874f6ad6f0596eb0a
MD5 629e1f5bc8a272ac3e5396e1eefb07f2
SHA1 f374f068644695c63fe6202d8beeee79a8be0db0
SHA512 3db523b54f6c336533b6707031b29bd9f57f4dc0e7d9332881de84b8e62ff39cc25fdc4c51cd3fbdad6b4176df6c81f2f2d0939978536bb215dada7de1ae37a4
SSDEEP 393216:aRuu0j0/7Zrc/AKeCJ0Dn1Pgr2w6SqSQwwVsyKS1QocZqEA:K0jAZrqAEJ0b1Y8F7fJ1LcZo
TLSH
T12FF633565B5F2512FC2890320274DE4A777E09D62B30CA87DFA489DEFE3A3D1442C66E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Bugasys.exe

C:\Users\Admin\AppData\Local\Temp\Bugasys.exe
"C:\Users\Admin\AppData\Local\Temp\Bugasys.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3780

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

in137E.dat

Path C:\Users\Admin\AppData\Local\Temp\in137E.dat
Size 4KB
SHA256 e801be8b7c1a4694b5a8773fb8bedc2ef2fe7507d316a9f0e0ca9eca426c92d4
MD5 4e4593a1de57d86938600b8c5fea8938
SHA1 fffb8451e0f26faf16b524a9b701928047291521
SHA512 e5d9c3a7d17eeae5f7d2c1ff467a9da2b0a86992a3626a9be9efbcb410b7bd501e98ffe0d6fec5de32fa9d8ab05ff2e02b80862dd5600ba138f88ded2cac3f7e
SSDEEP 96:2vfFDITBpBEI0XMtHyKei3YFFtGdVkDDV8POv9QaDVI3Q7w:KAukSKMWFPOmaDCUw
TLSH
T11C919DB617CB78F7C3648D19B11B395EF8325C8A56B6B1F77220C82228AF5504A82C2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download