Overview
overview
3Static
static
1Autoruns.exe
windows10-2004-x64
3Autoruns.exe
windows11-21h2-x64
3Autoruns64.exe
windows10-2004-x64
3Autoruns64.exe
windows11-21h2-x64
3Autoruns64a.exe
windows10-2004-x64
Autoruns64a.exe
windows11-21h2-x64
autoruns.chm
windows10-2004-x64
1autoruns.chm
windows11-21h2-x64
1autorunsc.exe
windows10-2004-x64
3autorunsc.exe
windows11-21h2-x64
3autorunsc64.exe
windows10-2004-x64
3autorunsc64.exe
windows11-21h2-x64
3autorunsc64a.exe
windows10-2004-x64
autorunsc64a.exe
windows11-21h2-x64
Analysis
- max time kernel
149s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/06/2026, 12:20
Static task
static1
Behavioral task
behavioral1
Sample
Autoruns.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Autoruns.exe
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
Autoruns64.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Autoruns64.exe
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
Autoruns64a.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Autoruns64a.exe
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
autoruns.chm
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
autoruns.chm
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
autorunsc.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
autorunsc.exe
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
autorunsc64.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
autorunsc64.exe
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
autorunsc64a.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
autorunsc64a.exe
Resource
win11-20260513-en
General
- Target autoruns.chm
- Size 24KB
- Sample260602-phtffsc16s
- SHA256 ecb58342290940a5eb6b72be6faa1d0afeec9df5898df3e026d75b7b08bd8f9a
- MD5 2c099793584365b8897fca7a4fa397e8
- SHA1 50eaf2f529b1e923f7d0238ea8d3eb2187ad19cf
- SHA512 ae407cd6b2d6ddf033f04b19ddf168423f819a4a42834afe03b7c35f86dd7b6572ced6c325fd9a56eacc9613944c4f3d17831d15713a35f0ea24f4c4c14af0ce
- SSDEEP 384:h2Svimo+ByfYV9H27NbyQhxEj4sbHxQpHgQkOx:h2Svimo+h8RrSjnHupAQkE
- TLSH T1E4B2D0723689DBB1E1A1407C3FD6A2DE38B220944D80022B67FEF30612753756DA2C97
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4468 hh.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4468 hh.exe 4468 hh.exe