Analysis
- user interaction
yes - max time kernel
38s - max time network
38s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
15/04/2026, 22:41
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
meditate.exe
Resource
win10v2004-20260130-en
0 signatures
300 seconds
Behavioral task
behavioral2
Sample
meditate.exe
Resource
win11-20260130-en
0 signatures
300 seconds
General
- Target meditate.exe
- Size 4.2MB
- Sample260415-2mcdysdx3z
- SHA256 bfd6b3bb81b8da4b3eec719582e6253eb639f201cd4ee2991420d12a4eb892fb
- MD5 d96fc53be609ea1b77bc07dbd2115012
- SHA1 22c44b62bb7dbe28cdab27c5b65172c184ff667f
- SHA512 59bb3e3b14ad46f3e3228024b85e924e267556820e30873bdd312726c22db3cc6e532b941ec6125a50b99eb49098d11f5b338e3a8d5c8d71834b0935044c788c
- SSDEEP 49152:9Vl4P+jj3LbpThp/sz0sQTR/t6Wei0ErvdDCF9EklZqA9P0FRS7ICQvj9QAHOdT:9JNTk0sQTl29EklZqA9P0FRHNZbOdT
- TLSH T13716AE42B351C194D526E438CD52E6ABE2317C041F2297EB32A87F1B6F732E11EB6B51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\meditate.exe"C:\Users\Admin\AppData\Local\Temp\meditate.exe"1⤵PID:1996
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:1504
-
C:\Users\Admin\AppData\Local\Temp\meditate.exe"C:\Users\Admin\AppData\Local\Temp\meditate.exe"1⤵PID:3988