Overview
overview
8Static
static
3Nowy folder.rar
windows10-2004-x64
1Nowy folder.rar
windows11-21h2-x64
1Nowy folde...76.exe
windows10-2004-x64
8Nowy folde...76.exe
windows11-21h2-x64
8Nowy folder/Grape.dll
windows10-2004-x64
1Nowy folder/Grape.dll
windows11-21h2-x64
1Nowy folde...v2.dll
windows10-2004-x64
1Nowy folde...v2.dll
windows11-21h2-x64
1Analysis
- max time kernel
149s - max time network
157s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
11/05/2026, 14:05
Behavioral task
behavioral1
Sample
Nowy folder.rar
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
Nowy folder.rar
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
Nowy folder/CheatEngine76.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
Nowy folder/CheatEngine76.exe
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
Nowy folder/Grape.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
Nowy folder/Grape.dll
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
Nowy folder/newest_xenv2.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
Nowy folder/newest_xenv2.dll
Resource
win11-20260130-en
General
- Target Nowy folder/newest_xenv2.dll
- Size 6.3MB
- Sample260511-rd5n2aft2k
- SHA256 254a100b8655c17ca1d2b0b3da52e9d139ce9469ac881c58fcc166bce577ba77
- MD5 6b68a0dbdcea2af1be715ac896a4361b
- SHA1 f7cf9098daf5278b20c178f6e5e154de386ae4de
- SHA512 9df5a6e083274df400b45552cd46f08804913b96cdd449cbec0e4a95da61cfd0882ea1d3fef93bd606b343114f524d6ac1b30d80a7f81b9b1b901291d0857c3a
- SSDEEP 98304:GvNh5ff1MwLhrGvF0wIMzHUnLw8G8JahYp1EAzJWMvMKlwoenKYq1e:7F0ZMzHU/JahYAgoMvPlwBnK
- TLSH T1F1660258AB3C422AE111ECBFE582AA1BC2767421231449F316D79F97ED2B3D6413D732
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 3548 rundll32.exe 3548 rundll32.exe 3548 rundll32.exe 3548 rundll32.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3548 rundll32.exe