Analysis
- user interaction
yes - max time kernel
24s - max time network
33s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
- submitted
03/05/2026, 01:04
General
- Target Easy-Delivery-Co-AnkerGames.zip
- Size 392.6MB
- Sample260503-bfe86ady9p
- SHA256 60c8e9190d0a1ebe35f4e086114677641c4810789d3aec86bbe5b94a3134181b
Score
3/10
Malware Config
Signatures
- Command and Scripting Interpreter: JavaScript 1 TTPs
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
- Suspicious use of SetWindowsHookEx 9 IoCs
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\Easy-Delivery-Co-AnkerGames.zip1⤵
-
C:\Windows\System32\WScript.exe"C:\Windows\System32\WScript.exe" "C:\Users\Admin\Desktop\TestWatch.vbe"1⤵
-
C:\Windows\System32\WScript.exe"C:\Windows\System32\WScript.exe" "C:\Users\Admin\Desktop\StepResize.js"1⤵
-
C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" "C:\Users\Admin\Desktop\ConfirmUndo.ods"1⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/756-0-0x000002409D800000-0x000002409D80C000-memory.dmp
memory/2804-2-0x00007FFA8FE50000-0x00007FFA8FE60000-memory.dmp
memory/2804-4-0x00007FFA8FE50000-0x00007FFA8FE60000-memory.dmp
memory/2804-3-0x00007FFA8FE50000-0x00007FFA8FE60000-memory.dmp
memory/2804-5-0x00007FFA8FE50000-0x00007FFA8FE60000-memory.dmp
memory/2804-6-0x00007FFA8FE50000-0x00007FFA8FE60000-memory.dmp
memory/2804-7-0x00007FFA8D680000-0x00007FFA8D690000-memory.dmp
memory/2804-8-0x00007FFA8D680000-0x00007FFA8D690000-memory.dmp
memory/2804-15-0x0000012CB9B70000-0x0000012CB9C13000-memory.dmp
memory/3640-1-0x000001F8924B0000-0x000001F8924BC000-memory.dmp