Analysis
- max time kernel
898s - max time network
654s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
19/05/2026, 10:32
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
evasion_sample_v5.exe
Resource
win10ltsc2021-20260513-en
1 signatures
900 seconds
Behavioral task
behavioral2
Sample
evasion_sample_v5.exe
Resource
win11-20260513-en
1 signatures
900 seconds
General
- Target evasion_sample_v5.exe
- Size 5KB
- Sample260519-mk2thaas91
- SHA256 935831715680f02136cb8582eb554c3be53541978d84b74cdf78197cca8422e5
- MD5 24a244967c87806ef81276f8bae7a8d1
- SHA1 45cf53e71aab21e75ffaa1f4af63c47050f76392
- SHA512 67c775efa1d37482e9a4e719cd9a14db825b2dea3242f05438b28c3ba934a0919aaa0467399cd4a7b100117a4ba8d3364b2800de3b8ef4f45a708f2169b42098
- SSDEEP 48:64e0X4as1SvvnjzlIBAMmpH6Vefwg3mgNd/etfmcc2+Bs:MN1SHjJIB6a2tNpIm3
- TLSH T128C14103F3ABD0DEC519C6F94ABF943864753C3D162A753917A4DF263C20B607664607
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 2 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000\Software\Microsoft\Windows\CurrentVersion\Run\WindowsUpdate = "C:\\Users\\Admin\\AppData\\Local\\Temp\\evasion_sample_v5.exe" evasion_sample_v5.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000\Software\Microsoft\Windows\CurrentVersion\Run\WindowsUpdate = "C:\\Users\\Admin\\AppData\\Local\\Temp\\evasion_sample_v5.exe" evasion_sample_v5.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\evasion_sample_v5.exe"C:\Users\Admin\AppData\Local\Temp\evasion_sample_v5.exe"1⤵
- Adds Run key to start application
PID:1248
-
C:\Users\Admin\AppData\Local\Temp\evasion_sample_v5.exeC:\Users\Admin\AppData\Local\Temp\evasion_sample_v5.exe1⤵
- Adds Run key to start application
PID:5108