Analysis
- max time kernel
149s - max time network
137s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
03/05/2026, 12:44
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ba81e323db3dc7ddf3c6819ea11af95658a519c5d5ffed463764ff88ff05f82a.exe
Resource
win10v2004-20260130-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ba81e323db3dc7ddf3c6819ea11af95658a519c5d5ffed463764ff88ff05f82a.exe
Resource
win11-20260130-en
2 signatures
150 seconds
General
- Target ba81e323db3dc7ddf3c6819ea11af95658a519c5d5ffed463764ff88ff05f82a.exe
- Size 1.1MB
- Sample260503-pyyecacx2m
- SHA256 ba81e323db3dc7ddf3c6819ea11af95658a519c5d5ffed463764ff88ff05f82a
- MD5 60e929bdbfc4aafa102aa702e9a29bf3
- SHA1 f521f8d6621c4546c66729a21edd6c5830edea2a
- SHA512 145dd09ee2a7c57eef393133a2bababd15410816c6af28d5ddf72a6422e9c8eafbca1964d69644c6635869e452056b3d9c1dc6800351955ad2f64b811342157a
- SSDEEP 12288:NRHzsP8t/8mylnZMbI6o7ITqtx+etauDkDXRFKhCsSt6sko06GRcmmm5xo:NRsPcEmGn2Ed7ITYxhA2rzoxVmx2
- TLSH T1DB452A07F26395ECC57BC0744657A772BA31B81905347E6E1E94DB322F32E609B2EB24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3716 ba81e323db3dc7ddf3c6819ea11af95658a519c5d5ffed463764ff88ff05f82a.exe - Suspicious use of SendNotifyMessage 1 IoCs
pid Process 3716 ba81e323db3dc7ddf3c6819ea11af95658a519c5d5ffed463764ff88ff05f82a.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\ba81e323db3dc7ddf3c6819ea11af95658a519c5d5ffed463764ff88ff05f82a.exe"C:\Users\Admin\AppData\Local\Temp\ba81e323db3dc7ddf3c6819ea11af95658a519c5d5ffed463764ff88ff05f82a.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:3716