Overview
overview
7Static
static
3442/Simple...er.exe
windows10-2004-x64
6442/Simple...er.exe
windows11-21h2-x64
6442/skyline.dll
windows10-2004-x64
5442/skyline.dll
windows11-21h2-x64
5442/skylineloader.exe
windows10-2004-x64
5442/skylineloader.exe
windows11-21h2-x64
5442/w64ms.exe
windows10-2004-x64
7442/w64ms.exe
windows11-21h2-x64
7442/w64ms.py
windows10-2004-x64
3442/w64ms.py
windows11-21h2-x64
3Analysis
- user interaction
yes - max time kernel
121s - max time network
119s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
09/05/2026, 00:42
Behavioral task
behavioral1
Sample
442/Simple Checker.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
442/Simple Checker.exe
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
442/skyline.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
442/skyline.dll
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
442/skylineloader.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
442/skylineloader.exe
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
442/w64ms.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
442/w64ms.exe
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
442/w64ms.py
Resource
win10v2004-20250619-en
Behavioral task
behavioral10
Sample
442/w64ms.py
Resource
win11-20260130-en
General
- Target 442/skylineloader.exe
- Size 13.5MB
- Sample260509-a2d3jsb19r
- SHA256 98692048fef03170ab43379f01b18173e692050ccef61eeb18b5e0e5ca15b7e3
- MD5 0920940f9d5395a0ce7c39d87bb2316a
- SHA1 935a0434a87c954c57b88aa02a1b23b4fcd51c0c
- SHA512 dd907af0c0e9660d7f7282f87ed2bef2172c69337da8210be0934f0fbc455abd7274fdb7015cbf123f2fb6453e71b23b26d2d4066837eac97da5ba16ad1f78c1
- SSDEEP 393216:Lc14wpP5/rUyBt4uBtOoDsRaWhzKu3v521eVW/YgR:Lqd5QyrBBZs0WMEW/YgR
- TLSH T175E623EA91E522E4E8D35A80724E9BCD71C0B25D45E96C2D3AC62C039F35D9F028DE77
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 1896 skylineloader.exe 1896 skylineloader.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1896 skylineloader.exe 1896 skylineloader.exe