b4196dba3e7d2e3662fda38bdd99160880c702a6d08b4c17b6d9505432294104

Analysis

user interaction
yes
max time kernel
82s
max time network
76s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/06/2026, 22:31

Target
Equilotl.exe
Size 11.5MB
Sample260620-2ftpnah14k
SHA256 b4196dba3e7d2e3662fda38bdd99160880c702a6d08b4c17b6d9505432294104
MD5 452de4b78fe8a81e3b0523875aa71cd4
SHA1 5776d7a76205f2ead45880414ef4dc14efb58c78
SHA512 c3163d8c49ca6b7d139c58d5137187ae04b46f1df6337093a7a4ea6636706d2590f0a4c54bb1227366a323e352f639d7762b1367c4146572140ba08d04a57ee6
SSDEEP 98304:NXbsE8OP9cDGPuZ7nR5/NucwyR2XNNKkjdGl+u9fX2I+zSdrMa1HTViYYRIMdFR+:N4EjXPiPbMy9GFkDP
TLSH
T1F4C65B47E8A214E8C1AAE1318663B633FB307C4907256BE71B90E6346F77BD05EB9750
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5744	Equilotl.exe

C:\Users\Admin\AppData\Local\Temp\Equilotl.exe
"C:\Users\Admin\AppData\Local\Temp\Equilotl.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:5744

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:6964