Analysis
- max time kernel
149s - max time network
151s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
04/06/2026, 21:08
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9b49dad54f6489a7ee2e7cd6f52a90e6105e7be66b0f000c9a6fff6a24cd0ed7.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
9b49dad54f6489a7ee2e7cd6f52a90e6105e7be66b0f000c9a6fff6a24cd0ed7.exe
Resource
win11-20260513-en
3 signatures
150 seconds
General
- Target 9b49dad54f6489a7ee2e7cd6f52a90e6105e7be66b0f000c9a6fff6a24cd0ed7.exe
- Size 9.9MB
- Sample260604-zzdfnsfy2j
- SHA256 9b49dad54f6489a7ee2e7cd6f52a90e6105e7be66b0f000c9a6fff6a24cd0ed7
- MD5 8990ce4be7d7049a51361a2fd9c6686c
- SHA1 07af8494906e08b11b2c285f84e8997f53d074e1
- SHA512 994ca3bd8d9679b78df535ba6343ccf3f84a7ac885b5d77aea541ce656a3ecc56e0a9c3e0db6658bbfde8d01494a39a60d512f93714f057e0239527e2b6b4662
- SSDEEP 98304:gn8FP1Cw5vst3LZG4cimDgls+IsOdCz31J11kCPm6utGDgQgdXcYbHKz7ADyG:gkP16ZBcvgls+XOdcFJxkYXwX32zo
- TLSH T11AA67C3F7A668268C2ADC17AE0578F50DA33F0742732C2EB5291357CCF16AD45E3A661
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1252 9b49dad54f6489a7ee2e7cd6f52a90e6105e7be66b0f000c9a6fff6a24cd0ed7.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1252 9b49dad54f6489a7ee2e7cd6f52a90e6105e7be66b0f000c9a6fff6a24cd0ed7.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\9b49dad54f6489a7ee2e7cd6f52a90e6105e7be66b0f000c9a6fff6a24cd0ed7.exe"C:\Users\Admin\AppData\Local\Temp\9b49dad54f6489a7ee2e7cd6f52a90e6105e7be66b0f000c9a6fff6a24cd0ed7.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:1252
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\1e33fb20
- Size 3.6MB
- SHA256 78d41b42ae232c56c713ac73e4570ced6943ff340e2436bd73389288eb71eaa3
- MD5 3c09069367cfb41f2b1a95a0e3be9eee
- SHA1 d6ba4307f7e30b8d48ecdadf8e4161ebd2a6da21
- SHA512 d87b3a349c5d9c3d921a8b51a92b659d8d032d2d34df030e8726ce26047a763eeb95badae75eb67720f64cbc7c389da563cacd5d68dcea146bcf180bc3773abb
- SSDEEP 98304:RcimDgls+IsOdCz31J11kCPm6utGDgQgdXcYbHKzz:Rcvgls+XOdcFJxkYXwX32zz
- TLSH T1700633B1C89C57EAF45B6FB2B57B9579C597AC1CC7697028026EE3D839031E603803DA
- MD5 SHA1 SHA512 SSDEEP TLSH