Analysis
- max time kernel
149s - max time network
149s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
29/05/2026, 22:28
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
nfa_tool.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
nfa_tool.exe
Resource
win11-20260513-en
1 signatures
150 seconds
General
- Target nfa_tool.exe
- Size 4.3MB
- Sample260529-2dsdtabs2y
- SHA256 9572297d8090899cf32b992ad373cf4f5e4d1eaf851ca1c949775c9cbf34d3de
- MD5 b3dd4c3baa32160517051ec61cd9aa03
- SHA1 8b48f300ac8e1d9516bfc5cf18ca972cf2360ec9
- SHA512 64a3f5ab095972e259c015313f61ab6d9c97748710e2b2ceb7f8c3b5f93190658b1c63b5f76b08525ebf0e2226c2bb0ce8f19c90201f6147a3e33abe06163fa4
- SSDEEP 49152:qImNT3/euRFvBNXrLkPA2eixtww+TIoM4gqd8kusT7zv2T7YT7x9bVroKJeq0JPi:qISLkwC5dWdw6bePuz
- TLSH T1F3268D03B746DAADC01AC474934682735A62B0CB0B35AAFF55C8563C6F6AEF05F38359
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 916 nfa_tool.exe