Overview
overview
8Static
static
5detailInstance.pub
windows10-2004-x64
3detailInstance.pub
windows11-21h2-x64
3eventFunction.ps1
windows10-2004-x64
3eventFunction.ps1
windows11-21h2-x64
3goland.exe
windows10-2004-x64
1goland.exe
windows11-21h2-x64
1ishod_6726...st.pdf
windows10-2004-x64
3ishod_6726...st.pdf
windows11-21h2-x64
3libcrypto.dll
windows10-2004-x64
1libcrypto.dll
windows11-21h2-x64
1ssh-shellhost.exe
windows10-2004-x64
1ssh-shellhost.exe
windows11-21h2-x64
1sublimetext.exe
windows10-2004-x64
1sublimetext.exe
windows11-21h2-x64
1trello.exe
windows10-2004-x64
1trello.exe
windows11-21h2-x64
1twitter.exe
windows10-2004-x64
3twitter.exe
windows11-21h2-x64
3ishod_6726...��.lnk
windows10-2004-x64
8ishod_6726...��.lnk
windows11-21h2-x64
8Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
23/04/2026, 14:01
Behavioral task
behavioral1
Sample
detailInstance.pub
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
detailInstance.pub
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
eventFunction.ps1
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
eventFunction.ps1
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
goland.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
goland.exe
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
ishod_6726_dolzhnost.pdf
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
ishod_6726_dolzhnost.pdf
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
libcrypto.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral10
Sample
libcrypto.dll
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
ssh-shellhost.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral12
Sample
ssh-shellhost.exe
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
sublimetext.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral14
Sample
sublimetext.exe
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
trello.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral16
Sample
trello.exe
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
twitter.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral18
Sample
twitter.exe
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
ishod_6726_dolzhnost.pdf.lnk
Resource
win10v2004-20260130-en
Behavioral task
behavioral20
Sample
ishod_6726_dolzhnost.pdf.lnk
Resource
win11-20260130-en
General
- Target goland.exe
- Size 16.9MB
- Sample260423-rbhrgset4j
- SHA256 06845a04d2329ca39c8378cb83118f6ffd278805f5b229cb65c21c4ca989fd56
- MD5 8c0434571198367df2cd1344f2bdc0cb
- SHA1 76b45853917fe87b3dc82331d542d1a6ddde806c
- SHA512 cc425c0bf099d0afd9ad8c7b3969b41cad845aa943280f601a48964007021cd35fe008a308276cfa6cd41bfbeaf4a58afd46feee29cbb8b9c025dce79a827f7a
- SSDEEP 98304:YQdDmaIjFodwAtZLAcwIdoO5V92XDzGKNk/11VhFovYES:YQ1tIZod97Roq2eKNkqvRS
- TLSH T127076C43E86501E8C6ADE630C6729223FB717C495B3127D76B50F7682F72BC0A6B9B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4136 goland.exe 4136 goland.exe