540fe31359f7aa858f49e84097eef0b399e492a35e57b93265868fbc57b7110a

Login
Reports

Overview

overview

Static

static

260110-31c...ed.zip

windows10-2004-x64

260110-31c...ed.zip

windows11-21h2-x64

cone.exe.zip

windows10-2004-x64

cone.exe.zip

windows11-21h2-x64

2to1ep.exe

windows10-2004-x64

2to1ep.exe

windows11-21h2-x64

main.pyc

windows10-2004-x64

main.pyc

windows11-21h2-x64

4363463463...63.exe

windows10-2004-x64

4363463463...63.exe

windows11-21h2-x64

Synaptics.exe

windows10-2004-x64

Synaptics.exe

windows11-21h2-x64

TsarBomba.exe

windows10-2004-x64

TsarBomba.exe

windows11-21h2-x64

cobaltstri...de.exe

windows10-2004-x64

cobaltstri...de.exe

windows11-21h2-x64

ed01ebfbc9...aa.exe

windows10-2004-x64

ed01ebfbc9...aa.exe

windows11-21h2-x64

random.exe

windows10-2004-x64

random.exe

windows11-21h2-x64

Resubmissions

18/08/2026, 19:34

02/07/2026, 09:19

29/05/2026, 16:41

26/05/2026, 03:15

21/05/2026, 18:13

21/05/2026, 18:04

21/05/2026, 17:59

21/05/2026, 17:58

21/05/2026, 17:58

21/05/2026, 17:57

Analysis

max time kernel
598s
max time network
411s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
15/04/2026, 10:19

Sharing

Copy URL Twitter E-mail

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

260110-31cgjshz9e_pw_infected.zip

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral2

Sample

260110-31cgjshz9e_pw_infected.zip

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

600 seconds

Behavioral task

behavioral3

Sample

cone.exe.zip

Resource

win10v2004-20260130-en

windows10-2004-x64

0 signatures

600 seconds

Behavioral task

behavioral4

Sample

cone.exe.zip

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

600 seconds

Behavioral task

behavioral5

Sample

2to1ep.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

86 signatures

600 seconds

backdoor bootkit default google chrome runtimebroker collection credential_access defense_evasion discovery execution asyncrat masslogger njrat quasar salatstealer installer persistence privilege_escalation ransomware rat spyware stealer trojan upx

Behavioral task

behavioral6

Sample

2to1ep.exe

Resource

win11-20260130-en

windows11-21h2-x64

61 signatures

600 seconds

bootkit default google chrome defense_evasion discovery execution agenttesla asyncrat masslogger njrat quasar salatstealer installer keylogger persistence privilege_escalation rat spyware stealer trojan upx

Behavioral task

behavioral7

Sample

main.pyc

Resource

win10v2004-20260130-en

windows10-2004-x64

3 signatures

600 seconds

Behavioral task

behavioral8

Sample

main.pyc

Resource

win11-20260130-en

windows11-21h2-x64

3 signatures

600 seconds

Behavioral task

behavioral9

Sample

4363463463464363463463463.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

45 signatures

600 seconds

backdoor credential_access defense_evasion discovery execution lumma xred installer persistence spyware stealer trojan upx

Behavioral task

behavioral10

Sample

4363463463464363463463463.exe

Resource

win11-20260130-en

windows11-21h2-x64

53 signatures

600 seconds

credential_access defense_evasion discovery execution asyncrat blankgrabber lumma quasar redline rustme xworm infostealer installer keylogger persistence pyinstaller rat spyware stealer trojan upx vmprotect

Behavioral task

behavioral11

Sample

Synaptics.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

20 signatures

600 seconds

backdoor first defense_evasion discovery execution lumma redline sheetrat xred impact infostealer installer macro pyinstaller ransomware stealer trojan upx

Behavioral task

behavioral12

Sample

Synaptics.exe

Resource

win11-20260130-en

windows11-21h2-x64

73 signatures

600 seconds

adware backdoor bootkit livetraffoc credential_access defense_evasion discovery execution discordrat jigsaw metasploit mimikatz quasar redline rustme sharphound xred xworm hacktool infostealer installer keylogger persistence privilege_escalation pyinstaller ransomware rat rootkit spyware stealer trojan upx

Behavioral task

behavioral13

Sample

TsarBomba.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

85 signatures

600 seconds

aspackv2 backdoor 158fdd2a4f5abb978509580715e5353f 987654321 cheat defense_evasion discovery execution ades_stealer chaos cobaltstrike dcrat discordrat dragonforce gcleaner gh0strat jlocker lockbit masslogger modiloader onlylogger raworld redline rokrat sectoprat umbral valleyrat_s2 vidar vipkeylogger xorist xworm impact infostealer installer keylogger loader persistence ransomware rat revoked_codesign rootkit spyware stealer trojan

Behavioral task

behavioral14

Sample

TsarBomba.exe

Resource

win11-20260130-en

windows11-21h2-x64

63 signatures

600 seconds

aspackv2 backdoor 158fdd2a4f5abb978509580715e5353f 987654321 cheat defense_evasion discovery execution ades_stealer chaos cobaltstrike dcrat discordrat dragonforce gh0strat jlocker lockbit masslogger modiloader redline rokrat sectoprat umbral valleyrat_s2 vidar vipkeylogger xorist xworm impact infostealer installer keylogger persistence ransomware rat revoked_codesign rootkit spyware stealer trojan

Behavioral task

behavioral15

Sample

cobaltstrike_shellcode.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

2 signatures

600 seconds

backdoor 1359593325 discovery cobaltstrike trojan

Behavioral task

behavioral16

Sample

cobaltstrike_shellcode.exe

Resource

win11-20260130-en

windows11-21h2-x64

2 signatures

600 seconds

backdoor 1359593325 discovery cobaltstrike trojan

Behavioral task

behavioral17

Sample

ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

24 signatures

600 seconds

defense_evasion discovery execution wannacry impact persistence ransomware spyware stealer worm

Behavioral task

behavioral18

Sample

ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.exe

Resource

win11-20260130-en

windows11-21h2-x64

21 signatures

600 seconds

defense_evasion discovery execution wannacry impact persistence ransomware spyware stealer worm

Behavioral task

behavioral19

Sample

random.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

59 signatures

600 seconds

068b0930042d878de1050d22d8a1be7f 0c14910b9da47efb683982ba180cb5d2 default fbf543 fc155c5bf8a148a93a2ba17de68393f0n google chrome rif0lm collection defense_evasion discovery execution amadey njrat quasar vidar persistence spyware stealer themida trojan upx

Behavioral task

behavioral20

Sample

random.exe

Resource

win11-20260130-en

windows11-21h2-x64

45 signatures

600 seconds

068b0930042d878de1050d22d8a1be7f 0c14910b9da47efb683982ba180cb5d2 default fbf543 fc155c5bf8a148a93a2ba17de68393f0n google chrome rif0lm defense_evasion discovery execution amadey njrat quasar vidar persistence spyware stealer themida trojan upx

Report Analysis Logs

General

Target
260110-31cgjshz9e_pw_infected.zip
Size 43.9MB
Sample260415-mczdeaew8z
SHA256 540fe31359f7aa858f49e84097eef0b399e492a35e57b93265868fbc57b7110a
MD5 f416ea2ac337fe70e42e546533bba142
SHA1 c65a4c375c03eab35f789b47d2aecf09a4173917
SHA512 5c23269a8e96eb7a89168bba28c08edc79e47b65f3f0687891bff2dd3f3480f4a42e1fa0f459acdcae21dd40084a7e1a8f659a0aaa26f8b76f5ee8b6eae15a69
SSDEEP 786432:psdNJ99hqe6FaG21SrpFf6y8bAU3pwfbV+7KsWBm6K8JXJ:iJ23KEpFfgAU3aTyKs7p8hJ
TLSH
T157A7335B23AD4AA66C087BD4F7DFB99A58E53193508BCB1E7050D43E1B8F0844CEBE58
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\260110-31cgjshz9e_pw_infected.zip
1⤵
PID:3572

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads