Analysis
- user interaction
yes - max time kernel
58s - max time network
33s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
23/05/2026, 16:58
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
sample.exe
Resource
win10v2004-20260513-en
3 signatures
600 seconds
General
- Target sample.exe
- Size 32.1MB
- Sample260523-vg2ckaev4q
- SHA256 a2e2135e14449a6a95f664362e4057d91693780cca04881cd86e2720220cc23f
- MD5 e244932b9a7827d32c921a7f52394223
- SHA1 ad35706298489fc228ef530f19ccfa9cc6ea6fc1
- SHA512 ad29fff428802315c0829c8a72263c78acca5a69376e2defc309f2f725ac538353a5f0a4e1418b5e37375f65cde17de8b7ca9863243b8cdb5a92dfb9ec3a2a52
- SSDEEP 786432:04h9ZmQ/4aaWjGi2GLcvPFYq4cvngeYecs8kCTlX1+jGVcowDobP6O:0w9ZmSBEyVpCo+O
- TLSH T17277B093255E398BE574227C6C0D91B8F0DAF02A8B65C7FA88E7FC2D11818911D53B7E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 4 IoCs
pid Process 5372 sample.exe 5372 sample.exe 5372 sample.exe 5372 sample.exe - Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 5372 sample.exe 5372 sample.exe 5372 sample.exe 5372 sample.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 5372 sample.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\76f08164705bc050\cpr.dll
- Size 847KB
- SHA256 17d348315db6e66c94eaab808814a6afde30abe857be8bb095487e75873a74ec
- MD5 bab4cd4fdb8f7ed055b57794df466c21
- SHA1 c25ecde28c40dfa3add8bd745250c01b24b94b23
- SHA512 c10052366f4a28a96f7c74a2aa2ff27954e27468c44226dd99587475f10ec9c6a50b534a33440f4a54bcffd3e4c6372963a10e2e70e95a521c1a180275c5bd69
- SSDEEP 6144:BR2hOqOza3dCc70ZNopiBXkUTJ2UNeeMlWZe+EotqM:y5OQUFjNeLWZio
- TLSH T140052222720B47DBD8B273B499C54522A330BC61BB19B7CB51DFB1220F9768D92F75A0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\76f08164705bc050\libcrypto-3-x64.dll
- Size 5.0MB
- SHA256 24cdea872780e9431c283aeaeae1851e9fe393a1aafc8e5725599b07a97c4b58
- MD5 88ec9322fbaf71f6d87c3623670370b8
- SHA1 cf9b40fb9a736676d7b00782e1e8e6fe47d21470
- SHA512 08338b2b72162565e36c4aa77efad7b39aa0478e70b546c5f1d87694108883f78cb3606137266c240c26f59e2c6673ae17e50370d93dfa2d272816a64154b381
- SSDEEP 98304:Z34aSXUPAfXG+HEvd40hM+Kj1CPwDvt3uFA0C:Z3FsUP4XG+HEv+uMH1CPwDvt3uFA0C
- TLSH T1A2368D69B9BC0049D87A91BCC2836227D771B42557F053CF2E284AF90F63BD52ABE750
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\76f08164705bc050\libcurl.dll
- Size 616KB
- SHA256 6f64a0ac6de5b7ad8ade469df103e25aae6539deb7c784c582c412288385ecf6
- MD5 003d58c36384241d049a9dd1a4d72520
- SHA1 3cc570c7755123772c2c92ffff16efae29e6841b
- SHA512 3af318c95a7e47daa71f6b8075ccc985b1bdd135ab16148a0f56132b4a5d70fbfd1a51d69643fbb19216b9c87e2e540e5193d4d39ed86ca59266d5f53d62d1dc
- SSDEEP 12288:9Dt4OATIHftsncDL5aoYAhQpuOuDXuK+YgWDrYWQZwy9:9hbATIvDL5uAhQoOuDXuK+YgWDrCwg
- TLSH T13CD46B5AA3F414A8D1A7C17DC6538617E3B3B055236097DF06B0CABA2F13BE2673A750
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\76f08164705bc050\zlib1.dll
- Size 88KB
- SHA256 a13d15908a3b37cf9fa1f6ad3de69d023403334efd7fa0715c9ec9c1ac37718a
- MD5 436c5ca3550696edbe1ac4258da03b9e
- SHA1 fccc7ca3fba1c01ef5e498bc79cc874b2c6b9aad
- SHA512 3b095ff0002a856832f537ca31828585b4688523898d3e747ba5cf3fcb1108c28364dcce54e9f73e60faa5fbc0e434d5d9fe37e1665a95db5f19c45183e6b074
- SSDEEP 1536:ovkS6XmTzqbKxfXOTBpp/foyUaDmjGI23aIOcIOZuihkxBJNJ5:HdXozwBppnqG3oSZuKkxBJNJ5
- TLSH T1D0936B8AAAB412A5D6F78178D8D207ADC331701407A44BDF5648A76A1F23BE41F363FD
- MD5 SHA1 SHA512 SSDEEP TLSH