27778f436f16708e362c8b685c57c69309e1e0450ee73cae16a7e6b5d5e16fb5

Login
Reports

Overview

overview

Static

static

bytebreake...um.exe

windows11-21h2-x64

bytebreake...3_0.js

windows11-21h2-x64

bytebreake...6_0.js

windows11-21h2-x64

bytebreake...ns.dll

windows11-21h2-x64

bytebreake...re.dll

windows11-21h2-x64

bytebreake...pet.js

windows11-21h2-x64

bytebreake...er.dll

windows11-21h2-x64

bytebreake...ec.lnk

windows11-21h2-x64

bytebreake...er.exe

windows11-21h2-x64

bytebreake...um.dll

windows11-21h2-x64

bytebreake...um.exe

windows11-21h2-x64

bytebreake...x.html

windows11-21h2-x64

bytebreake...ain.js

windows11-21h2-x64

bytebreake...tes.js

windows11-21h2-x64

bytebreake...ase.js

windows11-21h2-x64

bytebreake...ses.js

windows11-21h2-x64

bytebreake...del.js

windows11-21h2-x64

bytebreake...num.js

windows11-21h2-x64

bytebreake...tem.js

windows11-21h2-x64

bytebreake...ums.js

windows11-21h2-x64

bytebreake...nce.js

windows11-21h2-x64

bytebreake...del.js

windows11-21h2-x64

bytebreake...nal.js

windows11-21h2-x64

bytebreake...der.js

windows11-21h2-x64

bytebreake...ace.js

windows11-21h2-x64

bytebreake...-pd.js

windows11-21h2-x64

bytebreake...ons.js

windows11-21h2-x64

bytebreake...als.js

windows11-21h2-x64

bytebreake...rds.js

windows11-21h2-x64

bytebreake...ing.js

windows11-21h2-x64

bytebreake...bug.js

windows11-21h2-x64

bytebreake...ath.js

windows11-21h2-x64

Resubmissions

11/05/2026, 02:25

260511-cwkdgsdv8k

11/05/2026, 02:23

260511-ct7e8sat3x5

Analysis

max time kernel
149s
max time network
156s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
11/05/2026, 02:23

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

bytebreaker.cc/Potassium.exe

Resource

win11-20260130-en

windows11-21h2-x64

10 signatures

150 seconds

discovery

Behavioral task

behavioral2

Sample

bytebreaker.cc/Potassium.exe.WebView2/EBWebView/Default/Code Cache/js/058d1896e9e00103_0.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral3

Sample

bytebreaker.cc/Potassium.exe.WebView2/EBWebView/Default/Code Cache/js/f287f9d8bb68a316_0.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral4

Sample

bytebreaker.cc/Potassium.exe.WebView2/EBWebView/Domain Actions/3.0.0.16/domain_actions.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

bytebreaker.cc/Potassium.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/Microsoft.CognitiveServices.Speech.core.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

bytebreaker.cc/Potassium.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.81/adblock_snippet.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral7

Sample

bytebreaker.cc/WebView2Loader.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

bytebreaker.cc/autoexec.lnk

Resource

win11-20250610-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

bytebreaker.cc/bin/Decompiler.exe

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

bytebreaker.cc/bin/Potassium.dll

Resource

win11-20260130-en

windows11-21h2-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

bytebreaker.cc/bin/Potassium.exe

Resource

win11-20260130-en

windows11-21h2-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

bytebreaker.cc/bin/monaco/index.html

Resource

win11-20260130-en

windows11-21h2-x64

10 signatures

150 seconds

discovery

Behavioral task

behavioral13

Sample

bytebreaker.cc/bin/monaco/vs/base/worker/workerMain.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral14

Sample

bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral15

Sample

bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes/base.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral16

Sample

bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes/classes.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral17

Sample

bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes/classes/DataModel.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral18

Sample

bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes/classes/Enum.js

Resource

win11-20250502-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral19

Sample

bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes/classes/EnumItem.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral20

Sample

bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes/classes/Enums.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral21

Sample

bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes/classes/Instance.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral22

Sample

bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes/classes/Model.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral23

Sample

bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes/classes/RBXScriptSignal.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral24

Sample

bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes/classes/ServiceProvider.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral25

Sample

bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes/classes/Workspace.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral26

Sample

bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes/functions-pd.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral27

Sample

bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes/functions.js

Resource

win11-20250619-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral28

Sample

bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes/globals.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral29

Sample

bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes/keywords.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral30

Sample

bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes/libraries/Drawing.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral31

Sample

bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes/libraries/debug.js

Resource

win11-20260130-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Behavioral task

behavioral32

Sample

bytebreaker.cc/bin/monaco/vs/basic-languages/lua/autocompletes/libraries/math.js

Resource

win11-20250610-en

windows11-21h2-x64

1 signatures

150 seconds

execution

Report Analysis Logs

General

Target
bytebreaker.cc/bin/Potassium.exe
Size 16.5MB
Sample260511-ct7e8sat3x
SHA256 27778f436f16708e362c8b685c57c69309e1e0450ee73cae16a7e6b5d5e16fb5
MD5 31412c22c0b32993cc0dfd50f0a037e7
SHA1 83e19825f562ebcb20f2aa8352a0b82ec07d4fb5
SHA512 caaa595e6ef11b2b92fc2cf4fe78f0dcac0d898e9163e910b2f09ea34dd6bfe1b78cfbe55942507aa186855edbfdf7eb6cdd7ee0f3f6223a695c5f86177642c6
SSDEEP 196608:eDsmd5hgbRc9iASmLM2eSdI/lm+a119+kHHc6axzXSE+IouN+jPsgnqIVjJZt92+:eAmkc9Gm98lmV1rp+xjSZNXjnC9dyPv
TLSH
T1270723C2BDD592E8C4EB4E50568A33CE20D172DA85FE6A1F3AC55C036D70FA60D4A973
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
3340	Potassium.exe
3340	Potassium.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3340	Potassium.exe
3340	Potassium.exe
3340	Potassium.exe
3340	Potassium.exe

Processes

C:\Users\Admin\AppData\Local\Temp\bytebreaker.cc\bin\Potassium.exe
"C:\Users\Admin\AppData\Local\Temp\bytebreaker.cc\bin\Potassium.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
PID:3340

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3340-0-0x00007FF778939000-0x00007FF779310000-memory.dmp

Download

memory/3340-1-0x00007FFB2DC10000-0x00007FFB2DC12000-memory.dmp

Download

memory/3340-2-0x00007FF7788E0000-0x00007FF77A389000-memory.dmp

Download

memory/3340-5-0x00007FF778939000-0x00007FF779310000-memory.dmp

Download