Analysis
- user interaction
yes - max time kernel
149s - max time network
147s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
07/05/2026, 11:32
Behavioral task
behavioral1
Sample
arkizz humbled twisted(1).exe
Resource
win10v2004-20260130-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
arkizz humbled twisted(1).exe
Resource
win11-20260130-en
3 signatures
150 seconds
General
- Target arkizz humbled twisted(1).exe
- Size 766KB
- Sample260507-nnec2sgx7p
- SHA256 2250d9e426431acb4b19f374a8b1bca26666bd06f9f047251efdcc025872ba69
- MD5 bb6292a97f38a5f88f1bf9b64f85f088
- SHA1 c56645f8b6d609365bf1f0b300a8d2000ca53f56
- SHA512 c5444fe35546b5bb12d524f6b06e1fa5753288a90f6b3ccd77e508baee353b2954158db041cd9733330b20b571d952eecc082588758d6a01c2ad2a818efbd3e2
- SSDEEP 12288:6g19F7xh225gPIP+ckVfuLF19q99vnZTGN8GLNmdEGtVpDgiaLROn+uyZt0r5n5s:79F7PB5WImckVfaG9vnZilLN2j5DgiaL
- TLSH T1ADF4DFD92A624A9FC416733ECE25D6BA90D95BA4F243D392E470F015EE17B428F434E3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/4360-0-0x0000000140000000-0x00000001401BD000-memory.dmp upx behavioral1/memory/4360-5-0x0000000140000000-0x00000001401BD000-memory.dmp upx behavioral1/memory/4360-6-0x0000000140000000-0x00000001401BD000-memory.dmp upx behavioral1/memory/4360-7-0x0000000140000000-0x00000001401BD000-memory.dmp upx - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4360 arkizz humbled twisted(1).exe - Suspicious use of SendNotifyMessage 1 IoCs
pid Process 4360 arkizz humbled twisted(1).exe