Analysis
- user interaction
yes - max time kernel
16s - max time network
11s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
03/05/2026, 02:49
Behavioral task
behavioral1
Sample
Login Tool(UI英文版).exe
Resource
win10v2004-20260130-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Login Tool(UI英文版).exe
Resource
win11-20260130-en
1 signatures
150 seconds
General
- Target Login Tool(UI英文版).exe
- Size 358KB
- Sample260503-da4exaet3l
- SHA256 18894c38e8d66ae531047e36129527f3873285c42aa743206c53b934a4b35961
- MD5 46b2366df19dc2cfe9e84d716f5c94bc
- SHA1 966d0c31957d04bda1cd3b4bd28797fe956e1554
- SHA512 3c88843b353e2cfb87842fdc4b6bfbafa3c853b1bed536a55bc2544b5ea5049687b49100004702b25be89b595ebe168ba21c4fd6022ddcd1977fddc0067a405d
- SSDEEP 6144:FVoMhMa3O6EU33d42U4tjK3ghWieq87xlYnRY27V77/J8EsOv9mhsY0FdA:FVoMhMaJ35U4tjKQoy87/27ZJ3v9UsYz
- TLSH T1307423BF188E95E9D23333351ABD7875B61169323437DDA3A19582718DF8CE06AC3B90
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/5036-0-0x00007FF621450000-0x00007FF6216F1000-memory.dmp upx behavioral1/memory/5036-1-0x00007FF621450000-0x00007FF6216F1000-memory.dmp upx behavioral1/memory/5036-2-0x00007FF621450000-0x00007FF6216F1000-memory.dmp upx - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 5036 Login Tool(UI英文版).exe