Analysis
- max time kernel
149s - max time network
156s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
04/04/2026, 16:00
Behavioral task
behavioral1
Sample
$RNILUEV.exe
Resource
win10v2004-20260130-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
$RNILUEV.exe
Resource
win11-20260130-en
1 signatures
150 seconds
General
- Target $RNILUEV.exe
- Size 69.6MB
- Sample260404-tfz8faet7x
- SHA256 efdf5db823eaea4ed3482b497f47663ebbc3294ecf2b99b977293055905be31f
- MD5 730f869b468801c525fd26a244b8464b
- SHA1 fed0d709fe0460d8131fe4945f6e104882c95d73
- SHA512 ba2f5d7d90f9627f04577ea605ba8235f2836bd8a2ceb8fe1403d1d33cf4a98054228898b2526d8770bac01582b5204f7a732b40b19ecc7ff11d2c9c6dccda28
- SSDEEP 196608:SBqtiEPFNPy9iRl0TCMfM2+3vGd0hcZRSjHF2lFC/p+HINcZBAwLYhuR9lfn+Of3:Y9iwTDdJRKHgC/p+HuPOc47L
- TLSH T198F77D4EBB41CDE3E1198534D8B64BE07372ECA18B614B5721D43729EF3B2D50FA6688
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 3476 $RNILUEV.exe 3476 $RNILUEV.exe 3476 $RNILUEV.exe 3476 $RNILUEV.exe 3476 $RNILUEV.exe 3476 $RNILUEV.exe