Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    02/06/2026, 12:17

General

  • Target
    SilentSetup.exe
  • Size 8.9MB
  • Sample260602-pf13hsd18r
  • SHA256 f41e0ef9fbc2828d03c28047b3bb5122c7c4fc8a3fb96e163c6caaf4be3606ab
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Family: Shellter Trojan

    Shellter is a dynamic shellcode injector used to hide malicious payloads within existing PE files for evasion.

  • Detects Shellter Trojan 2 IoCs
  • Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SilentSetup.exe
    "C:\Users\Admin\AppData\Local\Temp\SilentSetup.exe"
    1⤵
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Suspicious behavior: EnumeratesProcesses
    PID:3468

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/3468-0-0x0000000000890000-0x0000000000918000-memory.dmp

        memory/3468-1-0x0000000000890000-0x0000000000918000-memory.dmp

        memory/3468-2-0x00007FF4FDCA0000-0x00007FF4FDCA1000-memory.dmp

        memory/3468-5-0x00007FF4FDCA0000-0x00007FF4FDCA1000-memory.dmp

        memory/3468-7-0x00007FF4FDCA0000-0x00007FF4FDCA1000-memory.dmp

        memory/3468-8-0x00007FF4FDCA0000-0x00007FF4FDCA1000-memory.dmp

        memory/3468-10-0x00007FF4FDCA0000-0x00007FF4FDCA1000-memory.dmp

        memory/3468-12-0x00007FF4FDCA0000-0x00007FF4FDCA1000-memory.dmp

        memory/3468-16-0x00007FF4FDCA0000-0x00007FF4FDCA1000-memory.dmp

        memory/3468-24-0x00007FF4FDCA0000-0x00007FF4FDCA1000-memory.dmp

        memory/3468-545-0x00007FFD0DC64000-0x00007FFD0DC65000-memory.dmp

        memory/3468-1132-0x00007FFD0DBC0000-0x00007FFD0DDC9000-memory.dmp

        memory/3468-1151-0x00007FF4FDE90000-0x00007FF4FDE97000-memory.dmp

        memory/3468-1158-0x00000000021B0000-0x00000000021B1000-memory.dmp

        memory/3468-1157-0x00000000021A0000-0x00000000021A1000-memory.dmp

        memory/3468-1156-0x00000000021A0000-0x00000000021A1000-memory.dmp

        memory/3468-1168-0x0000000002210000-0x0000000002211000-memory.dmp

        memory/3468-1210-0x0000000002360000-0x0000000002362000-memory.dmp

        memory/3468-1209-0x0000000002350000-0x0000000002351000-memory.dmp

        memory/3468-1208-0x0000000002350000-0x0000000002351000-memory.dmp

        memory/3468-1207-0x0000000002340000-0x0000000002341000-memory.dmp

        memory/3468-1206-0x0000000002340000-0x0000000002341000-memory.dmp

        memory/3468-1205-0x0000000002330000-0x0000000002331000-memory.dmp

        memory/3468-1204-0x0000000002330000-0x0000000002331000-memory.dmp

        memory/3468-1203-0x0000000002320000-0x0000000002321000-memory.dmp

        memory/3468-1202-0x0000000002320000-0x0000000002321000-memory.dmp

        memory/3468-1201-0x0000000002310000-0x0000000002311000-memory.dmp

        memory/3468-1200-0x0000000002310000-0x0000000002311000-memory.dmp

        memory/3468-1199-0x0000000002300000-0x0000000002301000-memory.dmp

        memory/3468-1198-0x0000000002300000-0x0000000002301000-memory.dmp

        memory/3468-1197-0x00000000022F0000-0x00000000022F1000-memory.dmp

        memory/3468-1196-0x00000000022F0000-0x00000000022F1000-memory.dmp

        memory/3468-1195-0x00000000022E0000-0x00000000022E1000-memory.dmp

        memory/3468-1194-0x00000000022E0000-0x00000000022E1000-memory.dmp

        memory/3468-1193-0x00000000022D0000-0x00000000022D1000-memory.dmp

        memory/3468-1192-0x00000000022D0000-0x00000000022D1000-memory.dmp

        memory/3468-1191-0x00000000022C0000-0x00000000022C1000-memory.dmp

        memory/3468-1190-0x00000000022C0000-0x00000000022C1000-memory.dmp

        memory/3468-1189-0x00000000022B0000-0x00000000022B1000-memory.dmp

        memory/3468-1188-0x00000000022B0000-0x00000000022B1000-memory.dmp

        memory/3468-1187-0x00000000022A0000-0x00000000022A1000-memory.dmp

        memory/3468-1186-0x00000000022A0000-0x00000000022A1000-memory.dmp

        memory/3468-1185-0x0000000002290000-0x0000000002291000-memory.dmp

        memory/3468-1184-0x0000000002290000-0x0000000002291000-memory.dmp

        memory/3468-1183-0x0000000002280000-0x0000000002281000-memory.dmp

        memory/3468-1182-0x0000000002280000-0x0000000002281000-memory.dmp

        memory/3468-1181-0x0000000002270000-0x0000000002271000-memory.dmp

        memory/3468-1180-0x0000000002270000-0x0000000002271000-memory.dmp

        memory/3468-1179-0x0000000002260000-0x0000000002261000-memory.dmp

        memory/3468-1178-0x0000000002260000-0x0000000002261000-memory.dmp

        memory/3468-1177-0x0000000002250000-0x0000000002251000-memory.dmp

        memory/3468-1176-0x0000000002250000-0x0000000002251000-memory.dmp

        memory/3468-1175-0x0000000002240000-0x0000000002241000-memory.dmp

        memory/3468-1174-0x0000000002240000-0x0000000002241000-memory.dmp

        memory/3468-1173-0x0000000002230000-0x0000000002231000-memory.dmp

        memory/3468-1172-0x0000000002230000-0x0000000002231000-memory.dmp

        memory/3468-1171-0x0000000002220000-0x0000000002221000-memory.dmp

        memory/3468-1170-0x0000000002220000-0x0000000002221000-memory.dmp

        memory/3468-1169-0x0000000002210000-0x0000000002211000-memory.dmp

        memory/3468-1167-0x0000000002200000-0x0000000002201000-memory.dmp

        memory/3468-1166-0x0000000002200000-0x0000000002201000-memory.dmp

        memory/3468-1165-0x00000000021F0000-0x00000000021F1000-memory.dmp

        memory/3468-1164-0x00000000021F0000-0x00000000021F1000-memory.dmp

        memory/3468-1163-0x00000000021D0000-0x00000000021D1000-memory.dmp

        memory/3468-1162-0x00000000021D0000-0x00000000021D1000-memory.dmp

        memory/3468-1161-0x00000000021C0000-0x00000000021C1000-memory.dmp

        memory/3468-1160-0x00000000021C0000-0x00000000021C1000-memory.dmp

        memory/3468-1159-0x00000000021B0000-0x00000000021B1000-memory.dmp

        memory/3468-1278-0x00007FFD0DBC0000-0x00007FFD0DDC9000-memory.dmp

        memory/3468-1669-0x00007FFD0DBC0000-0x00007FFD0DDC9000-memory.dmp

        memory/3468-3862-0x0000000000890000-0x0000000000918000-memory.dmp