Analysis
- max time kernel
149s - max time network
151s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
07/05/2026, 12:14
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
loader.exe
Resource
win10v2004-20260130-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
loader.exe
Resource
win11-20260130-en
2 signatures
150 seconds
General
- Target loader.exe
- Size 6KB
- Sample260507-pepyvsds8w
- SHA256 99305cd9f7ad9a6b1d33880b10fe0a45ede3e6857260fde2555d8856908ed21c
- MD5 40c744101ce98a91c95b4ff95a710df7
- SHA1 12c1b6447b7a03e437ce5ad040da072343cc3346
- SHA512 0349f96fb4395f0c9650f94521967ed426867fac4d4aa2a460bd637c6d400885c575c9966b6552dc6dd8fd500cf37376c6e669168deb1393f17ad0df9ebe2cf7
- SSDEEP 48:63RRiYlQ4milBeKGw5M1D9KzWCBPJpyhFll68t/aISqu/Gei6rWVZckt5ih2uult:JYFXGF1pwW+CD/t/aGuAVZnOm/kVzNt
- TLSH T193C1B505F3E84735E5AE4B3458738310937AF99A1932C74F38E9419D6DB3B108C92FA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Malware Config
Signatures
- Downloads MZ/PE file 1 IoCs
flow pid Process 2 4648 loader.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4648 loader.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\loader_prod_log.txt
- Size 208B
- SHA256 c5cf38e35c78f1d3aa936d2ae2305349a0b41196843d55552633216e93344aa5
- MD5 a650ea78c882c2d9857c54612fc98ee4
- SHA1 7c37127bf71be529b0efb1d177e5d9acda46cd6f
- SHA512 6867a89c5049001a916e4b391804b1591af595e32befe14b58d4150aa32fd816b299d8f12542b55ddc4f4547ebb729699695c661afc3ff25abfedbeeb5ed982a
- TLSH T14ED0229E44C3D6399820900378FAF1D0D22BA0E73EA12862C8380C06116147CB21429B
- MD5 SHA1 SHA512 TLSH