Overview

overview

7

Static

static

3

FatalityLoader.exe

windows10-ltsc_2021-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    120s
  • max time network
    118s
  • platform
    windows10-ltsc_2021_x64
  • resource
    win10ltsc2021-20260130-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20260130-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
  • submitted
    19/04/2026, 16:18

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    FatalityLoader.exe
  • Size 156.0MB
  • Sample260419-tr97saew3k
  • SHA256 ec2d97d4403f5e64cdc4996d2d83d9a1ab8673553f1cad00940d4d9f48f6ff7a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 49 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\FatalityLoader.exe
    "C:\Users\Admin\AppData\Local\Temp\FatalityLoader.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of AdjustPrivilegeToken
    PID:3424

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        D3DCompiler_47_cor3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\D3DCompiler_47_cor3.dll
        • Size 4.7MB
        • SHA256 a05d04a270f68c8c6d6ea2d23bebf8cd1d5453b26b5442fa54965f90f1c62082
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DirectWriteForwarder.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\DirectWriteForwarder.dll
        • Size 490KB
        • SHA256 fd8d2b7f3f9690be8b7624255b7f5fd7bdf59f40ca6a1f9dce632329113f71e6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        FatalityLoader.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\FatalityLoader.dll
        • Size 66KB
        • SHA256 e9e5f8e9c8cbe95274535d979ba5f0d881f68c9a63e787b29fa09572242a60ef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Win32.Registry.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\Microsoft.Win32.Registry.dll
        • Size 118KB
        • SHA256 08b179726f2b743627f9b5fdd1bb3b5b87c919cf6572c7a073fa1477e0bf157f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PresentationCore.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\PresentationCore.dll
        • Size 8.1MB
        • SHA256 f7eb93f6c8242d1e85dfdfc26e2ebfa1275a1d0460c78aa6a8d63ac5df708bb4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PresentationFramework-SystemXml.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\PresentationFramework-SystemXml.dll
        • Size 34KB
        • SHA256 b25b187bdacfc41488c78e2df03ac933f069074da1627841d7a856928453d6d3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PresentationFramework.Aero2.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\PresentationFramework.Aero2.dll
        • Size 438KB
        • SHA256 e62c63230cc1b10ca3cf805f44f16391b6d8fc753d4efe79a6df26dafc4ba382
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PresentationFramework.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\PresentationFramework.dll
        • Size 15.4MB
        • SHA256 d2614118e376293456a31b266df0ab596bbb8c5888f74b62a4aff8c0bc7e7edc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PresentationNative_cor3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\PresentationNative_cor3.dll
        • Size 1.2MB
        • SHA256 84c71e865436866fe5ff87b57adc212405d62eb8ea38d6aa38107fe7ec81c389
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Collections.Concurrent.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\System.Collections.Concurrent.dll
        • Size 270KB
        • SHA256 34b371f67cd159123b43fca5196de76535957cabb5c90fa9b0fde5ed6f52f548
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Collections.NonGeneric.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\System.Collections.NonGeneric.dll
        • Size 102KB
        • SHA256 4c76426273ef75a65a652ce9c9b89bc1f92075cfcdfc8232fbdb3fa3ee92b974
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Collections.Specialized.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\System.Collections.Specialized.dll
        • Size 102KB
        • SHA256 c07ac758f9cb7417cd5b212bb18e37280e2509f50bdf97cc1287b0600798a6b5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Collections.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\System.Collections.dll
        • Size 254KB
        • SHA256 c6cc98c8a834c7cf33c1f85013cd946cffe9872af7a01f9b1963808af6f166c5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.ComponentModel.Primitives.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\System.ComponentModel.Primitives.dll
        • Size 78KB
        • SHA256 6d573f6651acc687b9ccc8accd9a3b49da46217a94b50b824b03d216fe015f44
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.ComponentModel.TypeConverter.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\System.ComponentModel.TypeConverter.dll
        • Size 730KB
        • SHA256 b3e4100ad92b97cdf39a58dcbe8b51ad6504dffbe395664b4f8d620c220ae3ee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.ComponentModel.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\System.ComponentModel.dll
        • Size 30KB
        • SHA256 68f0da3af931de3ad69225a17a135ba68707a5dd4d2ffb52c9854454a61dd717
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Configuration.ConfigurationManager.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\System.Configuration.ConfigurationManager.dll
        • Size 1.0MB
        • SHA256 ef1b0d3dac6409bb8052d4e7f27f70bb52073d7f8281fc2987200308fbefe675
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Diagnostics.DiagnosticSource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\System.Diagnostics.DiagnosticSource.dll
        • Size 406KB
        • SHA256 e6bfecf5c7274de6506fea244000cd7042bebdf7cf4b996919bbf56d447a2616
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Diagnostics.Process.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\System.Diagnostics.Process.dll
        • Size 330KB
        • SHA256 184d7d52e1201f912a137749a7dd8f17b3d0acb0f35a97e68f0f6fd00b85ce0b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Diagnostics.TraceSource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\System.Diagnostics.TraceSource.dll
        • Size 142KB
        • SHA256 2455a9412d1a922abd74e0d9b3f3f566a6701807dc0bebe6079f8befbe4c20d9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.IO.Packaging.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\System.IO.Packaging.dll
        • Size 286KB
        • SHA256 82eef420e59e95342808e8f95347cc5ac7f78eff4e7919ae3301cf322e35945c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Linq.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\System.Linq.dll
        • Size 530KB
        • SHA256 ea4bbfec4261906f6ab813bf1cee2cb1d1df35c4e8804eddf7e57626a8e42cf0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Memory.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\System.Memory.dll
        • Size 154KB
        • SHA256 8263dc5a1698586d65426e79c0bc5bd624d80b39580098a060071217299b77e8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Net.Http.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\System.Net.Http.dll
        • Size 1.7MB
        • SHA256 ffb9afe9f99ef91afe97bcdefff1ed3ce1f3b8513d44194f24049293452aa2a3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Net.NameResolution.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\System.Net.NameResolution.dll
        • Size 110KB
        • SHA256 589afb77e6dae9e6bc616765689c9d1c32b1cb7856b3ff0085637aeea7d6aeba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Net.Primitives.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\System.Net.Primitives.dll
        • Size 226KB
        • SHA256 f1425b4b33700c760aa56910863728c78f6b67ff6f19425973b570b28ecad496
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Net.Requests.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\System.Net.Requests.dll
        • Size 338KB
        • SHA256 e7eefc03a88e30f94080379cde8e20d79ff9b7ea15dfcb7254143a35fce5c7bf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Net.Security.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\System.Net.Security.dll
        • Size 654KB
        • SHA256 18bc4086840828c0da6e9e842f3ae2bda54ef640859e91d97611e900a2399554
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Net.ServicePoint.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\System.Net.ServicePoint.dll
        • Size 46KB
        • SHA256 45f04ff88c42056df188674b2f1f7db7346d64f810a2bf43108bdf8fabb90624
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Net.Sockets.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\System.Net.Sockets.dll
        • Size 534KB
        • SHA256 3bb86873071b71c4fd36f9a4cf42ba717b0d397c918b262495eb56e73d883cef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Net.WebClient.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\System.Net.WebClient.dll
        • Size 166KB
        • SHA256 b73b8059f2cceac638147ab3db86929a1eea6792d6a8e7dfdbc4938f19f3ba7b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Net.WebHeaderCollection.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\System.Net.WebHeaderCollection.dll
        • Size 66KB
        • SHA256 54761fdc11fbaa3de5ce1fa3cd84a8b6d73541c2d797874ca2fb82269f4abcaa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.ObjectModel.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\System.ObjectModel.dll
        • Size 78KB
        • SHA256 24ac5f5e055d3d949f22abe9731c6d4b9b85e3404003226145d747fc3859f733
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Private.CoreLib.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\System.Private.CoreLib.dll
        • Size 12.6MB
        • SHA256 e8d4548b13ab75e59ebb9dfb09d5da965ce5b33ccf369a6e0f3d59696d58b769
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Private.Uri.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\System.Private.Uri.dll
        • Size 254KB
        • SHA256 8d77bd789981b53bdc43ab32f0a128ad7564f68f410aca490b87086344c8b7be
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Private.Xml.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\System.Private.Xml.dll
        • Size 7.6MB
        • SHA256 2d9e3283beec2bd4476c2d61f0f7d0bd3e744f8b59a63c8edd38135a4ce0f289
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Runtime.CompilerServices.VisualC.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\System.Runtime.CompilerServices.VisualC.dll
        • Size 30KB
        • SHA256 08d87d9351dd850d45cdc1e483fce5322f674d17ab0b980672e0b0a274f09fb9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Runtime.InteropServices.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\System.Runtime.InteropServices.dll
        • Size 94KB
        • SHA256 5d150301fefea1d99a89defbf5cf504ca3016bfaf901d81311a3a8bdbb758958
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Security.Claims.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\System.Security.Claims.dll
        • Size 98KB
        • SHA256 9d3b8a1e82ff68cc25baa93920b5cbca41f6d6f6e1033c3235fe277db8f3d638
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Security.Cryptography.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\System.Security.Cryptography.dll
        • Size 2.0MB
        • SHA256 e6b278bf90dfd07843f245849e9a07012f47a0fe33b63c16846069c391fa6592
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Security.Principal.Windows.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\System.Security.Principal.Windows.dll
        • Size 182KB
        • SHA256 8426f0ba82d88fb377de5334b277859423192f7260700087cae559edfec29cbe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Threading.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\System.Threading.dll
        • Size 82KB
        • SHA256 3a2a8a5f005a2a20a594d5059342998fab9bae4d4ec3c80275eb235d1adf07a0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Windows.Extensions.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\System.Windows.Extensions.dll
        • Size 114KB
        • SHA256 5017e22457f16087ff6c24dab86dd814412d40833dfa39d7db6d4238c199531a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Xaml.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\System.Xaml.dll
        • Size 1.4MB
        • SHA256 d3e9150231a3cb6b56137d40146ef295298d4ca8f6f9ccdc27e895e54d5afb37
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UIAutomationProvider.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\UIAutomationProvider.dll
        • Size 58KB
        • SHA256 336b97d3754ec8f8d03a69c8c0d4d27b76aad9075fbb469d5ca792bef3ebba50
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UIAutomationTypes.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\UIAutomationTypes.dll
        • Size 306KB
        • SHA256 94d9ce57fa25b73df44690839092aaf0a617ac6a1e6412d30ac32a2930350a10
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WindowsBase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\WindowsBase.dll
        • Size 2.2MB
        • SHA256 bff1c91773f9a18979812f6452e72dcdff0271953ef5557efe2f41295bd2f9e9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wpfgfx_cor3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\FatalityLoader\nYHBE7xiiRFRabjctpf8lG8e4ljZJIs=\wpfgfx_cor3.dll
        • Size 1.9MB
        • SHA256 342f9bfdfff193b1504fb8497eb251c56efcad360823d8a7cb089c85948331ac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download