Analysis
- max time kernel
149s - max time network
150s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
04/06/2026, 21:10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
a71252457565cdb9d490d0cfed81a41efc32935be8063ee6de23eee98857c5b2.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
a71252457565cdb9d490d0cfed81a41efc32935be8063ee6de23eee98857c5b2.exe
Resource
win11-20260513-en
2 signatures
150 seconds
General
- Target a71252457565cdb9d490d0cfed81a41efc32935be8063ee6de23eee98857c5b2.exe
- Size 17.1MB
- Sample260604-zz4mvsfs4t
- SHA256 a71252457565cdb9d490d0cfed81a41efc32935be8063ee6de23eee98857c5b2
- MD5 04b05c8ffd76a0e2be304ad14401428f
- SHA1 4b28bfd1f73bdc3b9314230b34ca845531508bfa
- SHA512 e4e037bad567925979375d844242a039d9ec5943889e80ef939b5c89969f57e73f5c68aac5ce62353480908487b75e14cebf7212eb736830a7118c44f3f7144c
- SSDEEP 393216:uFR9O3FwcykitEscwyXM9MOKkFhJydbtO:uFRE3FwcetEsHiob
- TLSH T1C3075AE115D781C9C559C1798182A72BB27B7B270335AB8F727C61F69E12F822937B0C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2840 a71252457565cdb9d490d0cfed81a41efc32935be8063ee6de23eee98857c5b2.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2840 a71252457565cdb9d490d0cfed81a41efc32935be8063ee6de23eee98857c5b2.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\a71252457565cdb9d490d0cfed81a41efc32935be8063ee6de23eee98857c5b2.exe"C:\Users\Admin\AppData\Local\Temp\a71252457565cdb9d490d0cfed81a41efc32935be8063ee6de23eee98857c5b2.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2840