Analysis
- max time kernel
149s - max time network
139s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/05/2026, 14:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4fd2af7c3f1b39228d22f314cd94ca2c5585a64d49337abd7e019d86b62a6fad.exe
Resource
win10v2004-20260130-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
4fd2af7c3f1b39228d22f314cd94ca2c5585a64d49337abd7e019d86b62a6fad.exe
Resource
win11-20260130-en
2 signatures
150 seconds
General
- Target 4fd2af7c3f1b39228d22f314cd94ca2c5585a64d49337abd7e019d86b62a6fad.exe
- Size 1.1MB
- Sample260502-rtqj2set8r
- SHA256 4fd2af7c3f1b39228d22f314cd94ca2c5585a64d49337abd7e019d86b62a6fad
- MD5 8c24a059220280ab06717f6f3ec74be3
- SHA1 e5f5988bb967fe554a3169c52af7e9fadd6782e9
- SHA512 39f847ee251f1d8bb9fbd34b13ec0c3b6c5d80bc14b9a8bc92f8fe6dc44fb91f07a34d3442c22b25c06d3d4ca87925606907ff859df520c958eb5d4cffc4fd15
- SSDEEP 24576:2hXxRWycjgdOAOXAsUSzhwHL8dj6uq3evJ:2hhky5dzsUmkLp3
- TLSH T110452B17E26254E8C17FC1748B57A7B2BA30BC294134BE1E1AD5C7322F72E605B6E760
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1244 4fd2af7c3f1b39228d22f314cd94ca2c5585a64d49337abd7e019d86b62a6fad.exe - Suspicious use of SendNotifyMessage 1 IoCs
pid Process 1244 4fd2af7c3f1b39228d22f314cd94ca2c5585a64d49337abd7e019d86b62a6fad.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\4fd2af7c3f1b39228d22f314cd94ca2c5585a64d49337abd7e019d86b62a6fad.exe"C:\Users\Admin\AppData\Local\Temp\4fd2af7c3f1b39228d22f314cd94ca2c5585a64d49337abd7e019d86b62a6fad.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1244
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\launcher_config.ini
- Size 346B
- SHA256 7dfb3832b911b56bda174f16aa5332827f35ade9aba88497c84ec85ab920fdc6
- MD5 b6dc500ebbbb203220550f9a1177db62
- SHA1 7b347e1ff25e08c2b5cb8ba3044ad230793061cb
- SHA512 ca8f7d31ceb1ddbc5a548b39a6cc677f68a7e1361c3b542bdce3c7148e57dbee92767fb16c58ccf1997250e7c68356227ba1a4297024cfcba795c21e062053a8
- TLSH T10BE02DA01E002842E076E4A8E8AB1BC0E0AAB00E888141B5FF3846DE1AAC43C1298A03
- MD5 SHA1 SHA512 TLSH