4e5cebe1908e12e8a4ed1198fb01fb87871dbe54847855b11b3540dbc47bbe88

Login
Reports

Overview

overview

Static

static

260110-31c...ed.zip

windows10-2004-x64

260110-31c...ed.zip

windows11-21h2-x64

cone.exe.zip

windows10-2004-x64

cone.exe.zip

windows11-21h2-x64

2to1ep.exe

windows10-2004-x64

2to1ep.exe

windows11-21h2-x64

main.pyc

windows10-2004-x64

main.pyc

windows11-21h2-x64

4363463463...63.exe

windows10-2004-x64

4363463463...63.exe

windows11-21h2-x64

Synaptics.exe

windows10-2004-x64

Synaptics.exe

windows11-21h2-x64

TsarBomba.exe

windows10-2004-x64

TsarBomba.exe

windows11-21h2-x64

cobaltstri...de.exe

windows10-2004-x64

cobaltstri...de.exe

windows11-21h2-x64

ed01ebfbc9...aa.exe

windows10-2004-x64

ed01ebfbc9...aa.exe

windows11-21h2-x64

random.exe

windows10-2004-x64

random.exe

windows11-21h2-x64

Resubmissions

18/08/2026, 19:34

02/07/2026, 09:19

29/05/2026, 16:41

26/05/2026, 03:15

21/05/2026, 18:13

21/05/2026, 18:04

21/05/2026, 17:59

21/05/2026, 17:58

21/05/2026, 17:58

21/05/2026, 17:57

Analysis

max time kernel
149s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20250619-en
resource tags

arch:x64arch:x86image:win10v2004-20250619-enlocale:en-usos:windows10-2004-x64system
submitted
11/02/2026, 09:27

Sharing

Copy URL Twitter E-mail

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

260110-31cgjshz9e_pw_infected.zip

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

260110-31cgjshz9e_pw_infected.zip

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

cone.exe.zip

Resource

win10v2004-20250619-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

cone.exe.zip

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

2to1ep.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

59 signatures

150 seconds

ddwwnnll credential_access defense_evasion discovery execution agenttesla amadey quasar redline salatstealer vidar infostealer keylogger miner persistence privilege_escalation spyware stealer themida trojan upx

Behavioral task

behavioral6

Sample

2to1ep.exe

Resource

win11-20260130-en

windows11-21h2-x64

39 signatures

150 seconds

21012026 ddwwnnll office04 defense_evasion discovery execution agenttesla amadey quasar redline salatstealer vidar infostealer keylogger persistence privilege_escalation spyware stealer themida trojan upx

Behavioral task

behavioral7

Sample

main.pyc

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

main.pyc

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

4363463463464363463463463.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

47 signatures

150 seconds

botnet 7b15bae1e3912ef2376af2468b6b714dn ty5r0t defense_evasion discovery execution donutloader mylobot vidar xworm installer loader persistence pyinstaller rat stealer themida trojan upx

Behavioral task

behavioral10

Sample

4363463463464363463463463.exe

Resource

win11-20250610-en

windows11-21h2-x64

17 signatures

150 seconds

backdoor botnet discovery mylobot persistence pyinstaller rat

Behavioral task

behavioral11

Sample

Synaptics.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

59 signatures

150 seconds

backdoor collection defense_evasion discovery downloader execution exelastealer redline svcstealer xred xworm impact infostealer installer macro persistence pyinstaller ransomware rat stealer trojan upx

Behavioral task

behavioral12

Sample

Synaptics.exe

Resource

win11-20260130-en

windows11-21h2-x64

63 signatures

150 seconds

aspackv2 backdoor botnet crypt ddns ddwwnnll runtimebroker defense_evasion discovery downloader execution 44caliber mylobot quasar redline rhadamanthys stealc svcstealer xred xworm infostealer installer persistence pyinstaller rat spyware stealer trojan upx

Behavioral task

behavioral13

Sample

TsarBomba.exe

Resource

win10v2004-20260129-en

windows10-2004-x64

95 signatures

150 seconds

aspackv2 backdoor 158fdd2a4f5abb978509580715e5353f 987654321 cheat defense_evasion discovery execution ades_stealer chaos cobaltstrike dcrat discordrat dragonforce gcleaner gh0strat jlocker lockbit masslogger modiloader onlylogger redline rokrat sectoprat umbral valleyrat_s2 vidar vipkeylogger xorist xworm impact infostealer installer keylogger loader persistence ransomware rat revoked_codesign rootkit spyware stealer trojan

Behavioral task

behavioral14

Sample

TsarBomba.exe

Resource

win11-20260130-en

windows11-21h2-x64

76 signatures

150 seconds

aspackv2 backdoor 158fdd2a4f5abb978509580715e5353f 987654321 cheat defense_evasion discovery execution ades_stealer chaos cobaltstrike dcrat discordrat dragonforce gh0strat jlocker lockbit masslogger modiloader redline rokrat sectoprat umbral valleyrat_s2 vidar vipkeylogger xorist xworm impact infostealer installer keylogger persistence ransomware rat revoked_codesign rootkit spyware stealer trojan

Behavioral task

behavioral15

Sample

cobaltstrike_shellcode.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

150 seconds

backdoor 1359593325 discovery cobaltstrike trojan

Behavioral task

behavioral16

Sample

cobaltstrike_shellcode.exe

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

150 seconds

backdoor 1359593325 discovery cobaltstrike trojan

Behavioral task

behavioral17

Sample

ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

20 signatures

150 seconds

defense_evasion discovery execution wannacry impact persistence ransomware spyware stealer worm

Behavioral task

behavioral18

Sample

ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe

Resource

win11-20260130-en

windows11-21h2-x64

20 signatures

150 seconds

defense_evasion discovery execution wannacry impact persistence ransomware spyware stealer worm

Behavioral task

behavioral19

Sample

random.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

61 signatures

150 seconds

fbf543 fc155c5bf8a148a93a2ba17de68393f0n rif0lm defense_evasion discovery execution amadey vidar miner persistence ransomware spyware stealer trojan upx

Behavioral task

behavioral20

Sample

random.exe

Resource

win11-20250610-en

windows11-21h2-x64

36 signatures

150 seconds

fbf543 fc155c5bf8a148a93a2ba17de68393f0n rif0lm defense_evasion discovery execution amadey vidar miner persistence stealer trojan upx

Report Analysis Logs

General

Target
cone.exe.zip
Size 43.9MB
Sample260211-leyn8aes8e
SHA256 4e5cebe1908e12e8a4ed1198fb01fb87871dbe54847855b11b3540dbc47bbe88
MD5 5e4a348e89afb91e6ae698f3104f7b47
SHA1 1ea7e4faa29e2803f50165f63815003fe22b8cbd
SHA512 a4282f90cff85a5802c551c770b2e849ef745bbde8c707d6878c841102d98bdcfe86c014df2acf34fb4471713d990265d0eaaf129dd560898785b8e7ebc53666
SSDEEP 786432:aGUqxoNIwFhSVPEgA5PjIXom0Fk/JK2a8Zq9HdQFaybEdhPm3dutgEXzu94Pa2SJ:aDySIOSVA7IJQk/JK2amQkTwdhPt1S2e
TLSH
T1E8A733667F1BF7D8F0499FA93C60C196559BC6C9834B0C28CFA3C720EDA78E66641478
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\cone.exe.zip
1⤵
PID:3484

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads