Analysis
- user interaction
yes - max time kernel
70s - max time network
72s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
15/04/2026, 17:33
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
potassium PAID.zip
Resource
win11-20260130-en
0 signatures
150 seconds
General
- Target potassium PAID.zip
- Size 39.0MB
- Sample260415-v5bf2shx2w
- SHA256 32b6ff4e71fbebf2365916ac612340a19c6b18b981ea659abb52a6ea601b7dd7
- MD5 e98052ce82e5aec4bf1503d8e3113a67
- SHA1 718e7049b6b7513b2357f742de292179455865c4
- SHA512 df7e0f18913ed66b661be0504dc8e69a7ce031d9ee4cc776f9b57306d5f81648c28133c1fb2c6cb640b9f4b3c01df4f90d1c1b312c12a08fbc02e370ab19fb81
- SSDEEP 786432:guMnHfQI2F2HD8pZ09KukFb4hLaYFVUFOdo4/z04h3u1wu8vdlYK/AfXuA:En/QCHD8p0WIuYnoOd/Ygu84GA
- TLSH T1B49733BC041C2101ED6BA3BA52F81F9D9E8FE2F58DDF045398A8533CE91A4B1717992D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\potassium PAID.zip"1⤵PID:456
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4964