Analysis
- user interaction
yes - max time kernel
149s - max time network
148s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
03/06/2026, 11:42
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
taroloader.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
taroloader.exe
Resource
win11-20260513-en
3 signatures
150 seconds
General
- Target taroloader.exe
- Size 703KB
- Sample260603-nt9fdaft2l
- SHA256 dfbc0af7f5abb3e9d1c0bf7d5c412d403a2a962212933dfbeba9c1d855b92576
- MD5 648406c59820d26cf975423ceb010c4c
- SHA1 b3a5b3704ed11586f09a66608a8fdb30cb3963b7
- SHA512 e8c24b165f8a16d429088cd1553b1ee49a57591afff039a7391cac91e37fc15bb515fff44e0e4751c33bb00e784700b5e56c493b0719062c68f27d3ea2dd6e9c
- SSDEEP 12288:VXchzjyRx3VP6Lu4IjJqnNF+NZzdZRiwwsYiqVjnfZQZ:NoyRx3HSF+NZzVN6iOjnfZQ
- TLSH T1F6E4BF47F6A682E5C42A8539D697970BFBB578181720C7CF63E859782FD31E04A7B302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2832 taroloader.exe 2832 taroloader.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2832 taroloader.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2832 taroloader.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\taro\taro.exe
- Size 1.8MB
- SHA256 116abe5fe6d7b52c8ff00b52cb44f58c86d3bd4a738e0e641c5b106770261388
- MD5 3ff5768d18a5d48450243b48fe8afe31
- SHA1 64130975282b996d9a78da9082b68534afa41348
- SHA512 a7c06506558d91b751d43076164b114e39d0cc33a3efbaad09f706bf5e1322246392aabb80403d787f6c12e8ababc3baf75382c76b43388885d3151ee761d49f
- SSDEEP 24576:fy0aHInL6uPICULhdNcjUsxsbNFwCaP2ihItUSVSRNBbu+KZ4iblVZzVyLA5e0A:fHj9IRhdqU2sbgxWUXRNM5TL00YfmnI
- TLSH T16885CF46B2B541E8C97FD17C8646A61FFB717808032097DB67E04E5A2F63BE06B7A311
- MD5 SHA1 SHA512 SSDEEP TLSH