Overview
overview
8Static
static
3Cute_Progr...me.exe
windows10-2004-x64
7Cute_Progr...me.exe
windows11-21h2-x64
8Cute_Progr...te.exe
windows10-2004-x64
7Cute_Progr...te.exe
windows11-21h2-x64
3Cute_Progr.../1.exe
windows10-2004-x64
7Cute_Progr.../1.exe
windows11-21h2-x64
3Cute_Progr...er.exe
windows10-2004-x64
7Cute_Progr...er.exe
windows11-21h2-x64
3Cute_Progr...an.exe
windows10-2004-x64
7Cute_Progr...an.exe
windows11-21h2-x64
8Cute_Progr...ic.exe
windows10-2004-x64
7Cute_Progr...ic.exe
windows11-21h2-x64
3Cute_Progr.../q.exe
windows10-2004-x64
7Cute_Progr.../q.exe
windows11-21h2-x64
7Cute_Progr...n1.exe
windows10-2004-x64
3Cute_Progr...n1.exe
windows11-21h2-x64
3Cute_Progr...st.exe
windows10-2004-x64
3Cute_Progr...st.exe
windows11-21h2-x64
3Cute_Progr...ll.exe
windows10-2004-x64
5Cute_Progr...ll.exe
windows11-21h2-x64
5Analysis
- max time kernel
899s - max time network
561s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
09/05/2026, 17:33
Static task
static1
Behavioral task
behavioral1
Sample
Cute_Program_v2/Click me.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
Cute_Program_v2/Click me.exe
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
Cute_Program_v2/Delete.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
Cute_Program_v2/Delete.exe
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
Cute_Program_v2/_/DontOpenMe/1.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
Cute_Program_v2/_/DontOpenMe/1.exe
Resource
win11-20250619-en
Behavioral task
behavioral7
Sample
Cute_Program_v2/_/DontOpenMe/after.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
Cute_Program_v2/_/DontOpenMe/after.exe
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
Cute_Program_v2/_/DontOpenMe/comman.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral10
Sample
Cute_Program_v2/_/DontOpenMe/comman.exe
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
Cute_Program_v2/_/DontOpenMe/pic.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral12
Sample
Cute_Program_v2/_/DontOpenMe/pic.exe
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
Cute_Program_v2/_/DontOpenMe/q.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral14
Sample
Cute_Program_v2/_/DontOpenMe/q.exe
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
Cute_Program_v2/_/DontOpenMe/ran1.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral16
Sample
Cute_Program_v2/_/DontOpenMe/ran1.exe
Resource
win11-20260130-en
Behavioral task
behavioral17
Sample
Cute_Program_v2/_/DontOpenMe/st.exe
Resource
win10v2004-20250619-en
Behavioral task
behavioral18
Sample
Cute_Program_v2/_/DontOpenMe/st.exe
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
Cute_Program_v2/_/DontOpenMe/wall.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral20
Sample
Cute_Program_v2/_/DontOpenMe/wall.exe
Resource
win11-20260130-en
General
- Target Cute_Program_v2/_/DontOpenMe/wall.exe
- Size 931KB
- Sample260509-v5damsa16w
- SHA256 54669a21dafbbddf6d668b79d94f9777ffe9df392c3b75a9cee7d171946da117
- MD5 92590e8a2c2a022426152a46ce939d26
- SHA1 da5f5501023cacd59f361a05dd074fb048d5782b
- SHA512 b6cf4516fe93f748878b49f413816be11073224f07ba3ebb29bc59a8fe90faf93fb9c5821977d078f6eff9ad56614e4dbca29a3392bd5e7435da3eb2526bbde0
- SSDEEP 24576:Xm5sulQV7Bf5eUHngzv3xynU96at5gxqchLWrTxBV:N8QV7RZov3xY53hLWx
- TLSH T1B215CF51F78580F6DD9130B221BEBB77693AA568033049C3B7A82D7D1E926C27D7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Sets desktop wallpaper using registry 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-3847269522-1618051987-1942096715-1000\Control Panel\Desktop\Wallpaper = "%ProgramData%\\Microsoft\\Windows\\system32\\wall.jpeg" wall.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language wall.exe - Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 3116 wall.exe 3116 wall.exe - Suspicious use of SendNotifyMessage 2 IoCs
pid Process 3116 wall.exe 3116 wall.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Cute_Program_v2\_\DontOpenMe\wall.exe"C:\Users\Admin\AppData\Local\Temp\Cute_Program_v2\_\DontOpenMe\wall.exe"1⤵
- Sets desktop wallpaper using registry
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:3116