8b26d1bfb7e298db18cc91d2f5567b5628c49318381654ea5a14fecbec5d8bc6

Resubmissions

03/05/2026, 23:14

03/05/2026, 23:13

user interaction
yes
max time kernel
14s
max time network
13s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
03/05/2026, 23:14

Target
tempspoof.exe
Size 40KB
Sample260503-277etsh13s
SHA256 8b26d1bfb7e298db18cc91d2f5567b5628c49318381654ea5a14fecbec5d8bc6
MD5 4379c9b47f98bb86c42777fb61f7ba1b
SHA1 bca5758376abec77e176e9ff2f3fa8c7fb406cd2
SHA512 d3c73ad9fcf83c35f7e6f4a3eb3c381225492cdd838fd9106db9b2f120799199b041726915ef8462791efcb82f986b0b3a7bfacc7a757e9013a64a12cad380c3
SSDEEP 768:MPf9/Imtow7GArCYoFkz+8RR9WimpVmbX5MEGo1Mfk1KJp5kHI5:M3emtx7ZCI+89WKbX5MEfMiOh5
TLSH
T101134B53767500E8DA79A2F986A7274AD3B2B8051B11BFCF07B4C16A0F375C1AC7EA41
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3128	tempspoof.exe

C:\Users\Admin\AppData\Local\Temp\tempspoof.exe
"C:\Users\Admin\AppData\Local\Temp\tempspoof.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3128

image.png

Path C:\stealer\image.png
Size 33KB
SHA256 faa24ec881e6040655c187a681d6dc496eb8aa41e1bd0652a180b3a40b457187
MD5 f953f499c9824953791551bfef65fe61
SHA1 00fbf8d23d0e9549798383179c9b0eae5d653f9f
SHA512 07bf316d186ac8d6eb8cf860fd0dbce854ae74ae26276be3950bd32b06894c7b24268280d504bb490218c5ec0e85b4eeb7e858011dcf4de64bbb06e4eb296fca
SSDEEP 768:Pr8FwJ2kfmG7rCq0GJtSBVRF0UGuEuOZejwpiUCTVwiYz:PVJ3fd7rCqduSduOZnIVVwvz
TLSH
T1D0F2F185B0036A346E502FB459DBE6CE1FADF8041A5318EDCE9DC30BA394C7648792BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download