Analysis
- user interaction
yes - max time kernel
40s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
16/05/2026, 05:10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MW19 (2).exe
Resource
win10ltsc2021-20260513-en
2 signatures
150 seconds
General
- Target MW19 (2).exe
- Size 4.3MB
- Sample260516-ftz8psd15m
- SHA256 1744698c71c06ac9aec08c4dc162d5f7c93f0bf936055ff339fd6fe9cb81089e
- MD5 41c40fed180aa5007fca3b58dc326180
- SHA1 cb17480a477210011ec913b7b6040a22426729aa
- SHA512 bfb1e3b7d37bd2ed9febe08826c096e84f88b3862764990b99e0ae64036dff67924cf7be4b93675c82f865505cc730d28e6c925d5caeae2d3a9ff997e413a071
- SSDEEP 98304:2wgKFBX7Iab5hNXnDTgbEFbIUk+W4YenhNG8XE6tX5X71E:XgKbl5fXfluUIaGo1R1E
- TLSH T1792623C2799263F9C05BC7F085B2692CB17D7BFB8F70948617C82A135DA782C5E36A41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
Malware Config
Signatures
- Drops file in Windows directory 2 IoCs
description ioc Process File created C:\Windows\SoftwareDistribution\Download\hOogK.sys MW19 (2).exe File created C:\Windows\SoftwareDistribution\Download\sDQ0X.exe MW19 (2).exe - Suspicious behavior: EnumeratesProcesses 16 IoCs
pid Process 2360 MW19 (2).exe 2360 MW19 (2).exe 2360 MW19 (2).exe 2360 MW19 (2).exe 2360 MW19 (2).exe 2360 MW19 (2).exe 2360 MW19 (2).exe 2360 MW19 (2).exe 2360 MW19 (2).exe 2360 MW19 (2).exe 2360 MW19 (2).exe 2360 MW19 (2).exe 2360 MW19 (2).exe 2360 MW19 (2).exe 2360 MW19 (2).exe 2360 MW19 (2).exe