Analysis
- max time kernel
149s - max time network
93s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
11/05/2026, 02:57
Behavioral task
behavioral1
Sample
8221457831d4a9d5335d4601aa99319a941a0d33be80e4d9f8c55e71ecdd5420.exe
Resource
win10v2004-20260130-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
8221457831d4a9d5335d4601aa99319a941a0d33be80e4d9f8c55e71ecdd5420.exe
Resource
win11-20260130-en
4 signatures
150 seconds
General
- Target 8221457831d4a9d5335d4601aa99319a941a0d33be80e4d9f8c55e71ecdd5420.exe
- Size 477KB
- Sample260511-dfy3dady6q
- SHA256 8221457831d4a9d5335d4601aa99319a941a0d33be80e4d9f8c55e71ecdd5420
- MD5 005a8ad5a9d2afb75720635bcd161797
- SHA1 08b89edcdaecabf1ce901019fd4aa31ea1ebaf7d
- SHA512 6d3be1f4be0c0b15e5503ec5f8262bef44d1af26191ecfb7b7d7d8b45db1f43311f3b0beb91d8f1a94b34156894112b8b64a9cf77ebbb4d018d90b997064024c
- SSDEEP 12288:WL0/wWc2froCzdWInEr8/Wg//2RY28FBCwsc:A0/wH2fMinErsWguWHec
- TLSH T12EA4F082B0D1CA69DBC945379A23FA8BC317A8BEC433959E63CEFE6B74353455408472
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- AutoIT Executable 1 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule behavioral2/memory/884-1-0x00007FF76BD60000-0x00007FF76BE85000-memory.dmp autoit_exe -
resource yara_rule behavioral2/memory/884-0-0x00007FF76BD60000-0x00007FF76BE85000-memory.dmp upx behavioral2/memory/884-1-0x00007FF76BD60000-0x00007FF76BE85000-memory.dmp upx - Suspicious use of FindShellTrayWindow 3 IoCs
pid Process 884 8221457831d4a9d5335d4601aa99319a941a0d33be80e4d9f8c55e71ecdd5420.exe 884 8221457831d4a9d5335d4601aa99319a941a0d33be80e4d9f8c55e71ecdd5420.exe 884 8221457831d4a9d5335d4601aa99319a941a0d33be80e4d9f8c55e71ecdd5420.exe - Suspicious use of SendNotifyMessage 3 IoCs
pid Process 884 8221457831d4a9d5335d4601aa99319a941a0d33be80e4d9f8c55e71ecdd5420.exe 884 8221457831d4a9d5335d4601aa99319a941a0d33be80e4d9f8c55e71ecdd5420.exe 884 8221457831d4a9d5335d4601aa99319a941a0d33be80e4d9f8c55e71ecdd5420.exe