Analysis
-
max time kernel
9s -
max time network
14s -
platform
windows11-21h2_x64 -
resource
win11-20250502-en -
resource tags
arch:x64arch:x86image:win11-20250502-enlocale:en-usos:windows11-21h2-x64system -
submitted
17/05/2025, 12:59
Behavioral task
behavioral1
Sample
TradingView_Premium_Desktop.zip
Resource
win10v2004-20250502-en
Behavioral task
behavioral2
Sample
TradingView_Premium_Desktop.zip
Resource
win11-20250502-en
Behavioral task
behavioral3
Sample
TradingView_Premium_Desktop_(password_github).zip
Resource
win10v2004-20250502-en
Behavioral task
behavioral4
Sample
TradingView_Premium_Desktop_(password_github).zip
Resource
win11-20250502-en
General
-
Target
TradingView_Premium_Desktop.zip
-
Size
130.3MB
-
MD5
9b87f8eee1a95c5463caf82e9e2afa6f
-
SHA1
f08eecd68a9f7d546e4e178f1d21dc58109624c5
-
SHA256
41e47827cdcd1c438b788a601ce2e6e5f57116f341fd19741e2068568b1ca797
-
SHA512
ee3ceddd00d0d160a3542ee06de0702a87e97337ec2f74b711b2c85115a44520ec096d0f770786e1796a32c118f5bb9e99a2ed3f80bdced15c78944aa860a845
-
SSDEEP
3145728:ep8S1elf8O2gCMY7pUv0h6eyl7iuA9Cd0dndGP8Ya:ep8Skf8qYuv0EziuAMdiGI
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\TradingView_Premium_Desktop.zip1⤵PID:1528
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:6140