Analysis
- max time kernel
4s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
05/06/2026, 21:28
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
antimicrox-3.6.1-Windows-AMD64.exe
Resource
win10v2004-20260513-en
2 signatures
300 seconds
Behavioral task
behavioral2
Sample
antimicrox-3.6.1-Windows-AMD64.exe
Resource
win11-20260513-en
2 signatures
300 seconds
General
- Target antimicrox-3.6.1-Windows-AMD64.exe
- Size 15.3MB
- Sample260605-1bb4dad13x
- SHA256 467648540ab4bcf83641cb22b3359669bf1b9130b87d4be0aa438221ef3eb06b
- MD5 86812697451c2171f5b71cddc57ad08b
- SHA1 d79a4507e5835a32dc42f5525692b5b408dbd1b3
- SHA512 6db8208b6f702d8c9029e0ad64f5a5a072eb2c6d0157e7f3ef58bf4448d6e5786eafb6fb9cc7bfd89db246f460e521d506543de787973dbb5ec879627fecfcc1
- SSDEEP 393216:NCmKhqcXR9gSJ3dVHQ/wYiFHz/ggtxmmvK2u+7UQyQSwK5K:NhKRrDZdVw2FHzVewDypR5K
- TLSH T1EFF633944E9F66E9F1C7C573ADB1987F0BF824A0B222EF77662D761D786044E03211B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 5 IoCs
pid Process 4956 antimicrox-3.6.1-Windows-AMD64.exe 4956 antimicrox-3.6.1-Windows-AMD64.exe 4956 antimicrox-3.6.1-Windows-AMD64.exe 4956 antimicrox-3.6.1-Windows-AMD64.exe 4956 antimicrox-3.6.1-Windows-AMD64.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\nss24F9.tmp\InstallOptions.dll
- Size 30KB
- SHA256 a9415ec35ca005da286219bae73d4d0574efa6f0cd24bfefa6ceea5a973d3f5b
- MD5 45b3bb72a15d0f7f1b44877d27239150
- SHA1 d8d51cb42606d29ad3954524e8ceb9fce991d4ac
- SHA512 7f7a0133b4d2cbf38f44112ec05bb261cc99efa6d94d3e09234b665e53fff83b9eaaf02c168e24717ee8562a6c5cb2998b427be556d34c7ded6e80a4cafd504c
- SSDEEP 768:56NAiHShOHsh6AVVUX8yG+CQV+llEknRJ:kNAiHShH62VAGhnR
- TLSH T1CCE2F81FF7E190BDE952D27885FA8A72F971FC0600357A2E0920D27F2E34D609A3D566
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nss24F9.tmp\UserInfo.dll
- Size 7KB
- SHA256 b2fb11e4b46745a94490c7124f447fc2f1b3fa03d5182e61c2605f1cb8fd2433
- MD5 6a6fb2c7b927e14fa5eb6e75c0d28f68
- SHA1 df4ba1d6ae9efa43025d14aff4ac1a7cfcf6c95c
- SHA512 e60f8e4571fc37e0872a83558d3ec15ce11be1395cdd57099940199026c247071a0c2cc17c88b770aa450acb88ec00b4765610985bd8da06b1c4e31597fe7e92
- SSDEEP 96:4yubewoiLOeI/ZhuQKzM6dKNzv+ku8KjxjPS2gwmlXCGdxqrdbbtKbdj:zuC/h+l9KNzvWTylXR9
- TLSH T162E1858FB3A12696C456F278C1FA5E32BCF7BC345627621D480161263D34AA1F339B46
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nss24F9.tmp\ioSpecial.ini
- Size 1KB
- SHA256 c85ff282b6901d7e6689de0f6891a924cba47b97f9e3137c0209ac852a8b1a12
- MD5 8af8dac7b1af62d7d2e8e8d56814a7b2
- SHA1 a63189fdaeae2d30c42804aa49759e0b9e8e04da
- SHA512 ca3495138dd8f526b15143cfb90e93941fcddc482ceef052d62c46879e9851d38fa925796e4a4ad38af5ff14afab2000e84a5965de1477a38f20ead1aa6f0ee2
- TLSH T17D21BD137AFC0614F2FBBB54FFB540798B3A7816A838D50D41D10A0E08F5E408923BAB
- MD5 SHA1 SHA512 TLSH