Analysis
- max time kernel
149s - max time network
140s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
04/04/2026, 00:37
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Feather.exe
Resource
win10v2004-20260130-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Feather.exe
Resource
win11-20260130-en
2 signatures
150 seconds
General
- Target Feather.exe
- Size 613KB
- Sample260404-aylm8agy2x
- SHA256 113a05106b85844a4fcc943e5b06af75bb45c22cec1e6aa30400a13e00dcfc22
- MD5 b7e31b72a11298cc1a2da18ad6ee17bc
- SHA1 6a8dfb68735ef059845a4925a46626876c0863d0
- SHA512 19ae2804b4536c8a1737e2beba68e66aa49a471619d5d239ebb2916df1216053c28f5c39e8e96793bf211aff0642037d1571a551b09c7e84a6acc96caded2824
- SSDEEP 6144:dRdSjrwJ+J20m9NbMxs9jcShHZBvu3BFulPjD/QbL2WDHqsJwO5EifyuY7AUF:Ynm99ISkWJjbQWSKVIxfyIUF
- TLSH T17FD4A9DB6B3861D0F815BAFCA9C06D05BF60AE9876804C9F1186F75FDE3E9935E48084
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
pid Process 4504 EojeWocC.exe - Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-747994418-3253881032-1527946131-1000\Software\Microsoft\Windows\CurrentVersion\Run\EojeWocC = "C:\\Users\\Admin\\AppData\\Roaming\\mlh21-3xrj3-3h1\\EojeWocC.exe" Feather.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Feather.exe"C:\Users\Admin\AppData\Local\Temp\Feather.exe"1⤵
- Adds Run key to start application
PID:4244
-
C:\Users\Admin\AppData\Roaming\mlh21-3xrj3-3h1\EojeWocC.exeC:\Users\Admin\AppData\Roaming\mlh21-3xrj3-3h1\EojeWocC.exe1⤵
- Executes dropped EXE
PID:4504
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\mlh21-3xrj3-3h1\EojeWocC.exe
- Size 613KB
- SHA256 113a05106b85844a4fcc943e5b06af75bb45c22cec1e6aa30400a13e00dcfc22
- MD5 b7e31b72a11298cc1a2da18ad6ee17bc
- SHA1 6a8dfb68735ef059845a4925a46626876c0863d0
- SHA512 19ae2804b4536c8a1737e2beba68e66aa49a471619d5d239ebb2916df1216053c28f5c39e8e96793bf211aff0642037d1571a551b09c7e84a6acc96caded2824
- SSDEEP 6144:dRdSjrwJ+J20m9NbMxs9jcShHZBvu3BFulPjD/QbL2WDHqsJwO5EifyuY7AUF:Ynm99ISkWJjbQWSKVIxfyIUF
- TLSH T17FD4A9DB6B3861D0F815BAFCA9C06D05BF60AE9876804C9F1186F75FDE3E9935E48084
- MD5 SHA1 SHA512 SSDEEP TLSH