Analysis
- user interaction
yes - max time kernel
149s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
29/05/2026, 00:06
Static task
static1
Behavioral task
behavioral1
Sample
lowpingnotexturefastflagbylaiiluuhUPDATE1.zip
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
lowpingnotexturefastflagbylaiiluuhUPDATE1.zip
Resource
win11-20260513-en
1 signatures
150 seconds
General
- Target lowpingnotexturefastflagbylaiiluuhUPDATE1.zip
- Size 1KB
- Sample260529-ad5wcset3p
- SHA256 c62a1142d7031c0b0516809cb919a2f981d5c3004b38fa75674af016789ae8c7
- MD5 6bba0799c60751408b53b6f79c72bca2
- SHA1 8b83e7883b8524933b77d934d55c96b857acebe6
- SHA512 95b32ae2d36a2617d4563c4eb09093dc92a3ba1fe55846c2c8ae32030923da5a30842e9abd52e6c9e225a0c6f68a9300855feff455e6b5a96b64e93dee3c972f
- TLSH T166313329E37E159ACDBBD2B5206F550973D1410FB9A0536BCB58C183CC723A15F2212A
- MD5 SHA1 SHA512 TLSH
Score
3/10
Malware Config
Signatures
- System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs
Adversaries may check for Internet connectivity on compromised systems.
pid Process 1268 Explorer.exe
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\lowpingnotexturefastflagbylaiiluuhUPDATE1.zip1⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:1268
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:2688