Analysis
- user interaction
yes - max time kernel
1049s - max time network
556s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
01/06/2026, 18:19
Static task
static1
Behavioral task
behavioral1
Sample
AmbrionExternalNew.zip
Resource
win11-20260513-en
0 signatures
150 seconds
General
- Target AmbrionExternalNew.zip
- Size 8KB
- Sample260601-wya3dacz21
- SHA256 594e17bb6526c5660f97a9e689aca74f7b45575ebd3dc4804e71befee5a9188b
- MD5 3b598214fb98222bb28531507e602f87
- SHA1 8a732e643338be0d825107aba47fd1203b2db0f6
- SHA512 93380c12378ceec52e2956ca4dbaba596beb148389254d0fe3491d3b75be9654e967e34ef3c3c3978f4f50fd7d90cb0fab7d7747932278c9439a47b3b71a017f
- SSDEEP 192:iXVMg1Jp4SY5+FDc5EgC5DlmfTc3n9ywNyeK7lKzTQ9o7m5c3:iXV1fy0FEnC5DlmfTCn9VseWEQ5c3
- TLSH T17CF1AF1EB991F7C5D509FF7C8E393A131D845620C5F31653C47B66207A834526B16F36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\AmbrionExternalNew.zip1⤵PID:404
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4100