Overview
overview
8Static
static
3Nowy folder.rar
windows10-2004-x64
1Nowy folder.rar
windows11-21h2-x64
1Nowy folde...76.exe
windows10-2004-x64
8Nowy folde...76.exe
windows11-21h2-x64
8Nowy folder/Grape.dll
windows10-2004-x64
1Nowy folder/Grape.dll
windows11-21h2-x64
1Nowy folde...v2.dll
windows10-2004-x64
1Nowy folde...v2.dll
windows11-21h2-x64
1Analysis
- max time kernel
149s - max time network
96s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
11/05/2026, 14:05
Behavioral task
behavioral1
Sample
Nowy folder.rar
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
Nowy folder.rar
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
Nowy folder/CheatEngine76.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
Nowy folder/CheatEngine76.exe
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
Nowy folder/Grape.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
Nowy folder/Grape.dll
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
Nowy folder/newest_xenv2.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
Nowy folder/newest_xenv2.dll
Resource
win11-20260130-en
General
- Target Nowy folder/Grape.dll
- Size 4.0MB
- Sample260511-rd5n2aft2k
- SHA256 4afe8c4dd9c0c5ba7696e1b8e90431c69ee8315efb2e305824f8a1136ac7002b
- MD5 4e2c1c6a6c27c1fff45ccde32277b768
- SHA1 d426135e0b3c2aad629b2714294480e17a37e9dd
- SHA512 5ba3af1ec69577881f977742c1fbb7abb3660c2e73b441df14708bbbbb6bd6fd0c0b3aeb8d4da57515503072e99bc038f87ebd2c466981688fde5c187e904bf2
- SSDEEP 49152:gdiY8ERM7Fzc6vuHaHELnQVGYBhRKYmDDEje45+Yjn+oBLess9CNlbkYDm7POJD9:xECGwFess92tkYDmLAq3E1pvJNf9
- TLSH T18116D045B2D5C162ED2F43B449A6C526E0323AE54730A3CBEB9A08D51E3E7F40779B4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 22 IoCs
pid Process 3680 rundll32.exe 3680 rundll32.exe 3680 rundll32.exe 3680 rundll32.exe 3680 rundll32.exe 3680 rundll32.exe 3680 rundll32.exe 3680 rundll32.exe 3680 rundll32.exe 3680 rundll32.exe 3680 rundll32.exe 3680 rundll32.exe 3680 rundll32.exe 3680 rundll32.exe 3680 rundll32.exe 3680 rundll32.exe 3680 rundll32.exe 3680 rundll32.exe 3680 rundll32.exe 3680 rundll32.exe 3680 rundll32.exe 3680 rundll32.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 3680 rundll32.exe 3680 rundll32.exe