Analysis

  • max time kernel
    230s
  • max time network
    210s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    17/04/2026, 18:10

General

  • Target
    win64.exe
  • Size 96.8MB
  • Sample260417-wsbrqaey8m
  • SHA256 875fc2f7d33a33e8104a71b0279b91d8a9c41507163b22de894bf23f48de2ca7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Modifies registry class 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\win64.exe
    "C:\Users\Admin\AppData\Local\Temp\win64.exe"
    1⤵
    • Modifies registry class
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    PID:5556

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/5556-1-0x000002365EAE0000-0x000002365EAE1000-memory.dmp

        memory/5556-2-0x000002365EAE0000-0x000002365EAE1000-memory.dmp

        memory/5556-0-0x000002365EAE0000-0x000002365EAE1000-memory.dmp

        memory/5556-71-0x00007FF7DE690000-0x00007FF7E47F6000-memory.dmp

        memory/5556-72-0x000002365AC90000-0x000002365B43E000-memory.dmp

        memory/5556-73-0x00007FF7DE690000-0x00007FF7E47F6000-memory.dmp

        memory/5556-75-0x00007FF7DE690000-0x00007FF7E47F6000-memory.dmp

        memory/5556-77-0x00007FF7DE690000-0x00007FF7E47F6000-memory.dmp

        memory/5556-79-0x00007FF7DE690000-0x00007FF7E47F6000-memory.dmp

        memory/5556-81-0x00007FF7DE690000-0x00007FF7E47F6000-memory.dmp

        memory/5556-83-0x00007FF7DE690000-0x00007FF7E47F6000-memory.dmp

        memory/5556-85-0x00007FF7DE690000-0x00007FF7E47F6000-memory.dmp

        memory/5556-87-0x00007FF7DE690000-0x00007FF7E47F6000-memory.dmp

        memory/5556-89-0x00007FF7DE690000-0x00007FF7E47F6000-memory.dmp

        memory/5556-91-0x00007FF7DE690000-0x00007FF7E47F6000-memory.dmp

        memory/5556-93-0x00007FF7DE690000-0x00007FF7E47F6000-memory.dmp

        memory/5556-95-0x00007FF7DE690000-0x00007FF7E47F6000-memory.dmp

        memory/5556-97-0x00007FF7DE690000-0x00007FF7E47F6000-memory.dmp

        memory/5556-99-0x00007FF7DE690000-0x00007FF7E47F6000-memory.dmp

        memory/5556-101-0x00007FF7DE690000-0x00007FF7E47F6000-memory.dmp

        memory/5556-103-0x00007FF7DE690000-0x00007FF7E47F6000-memory.dmp

        memory/5556-105-0x00007FF7DE690000-0x00007FF7E47F6000-memory.dmp

        memory/5556-107-0x00007FF7DE690000-0x00007FF7E47F6000-memory.dmp

        memory/5556-109-0x00007FF7DE690000-0x00007FF7E47F6000-memory.dmp

        memory/5556-111-0x00007FF7DE690000-0x00007FF7E47F6000-memory.dmp

        memory/5556-113-0x00007FF7DE690000-0x00007FF7E47F6000-memory.dmp