Analysis
- user interaction
yes - max time kernel
149s - max time network
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/06/2026, 00:44
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RoguePlanet.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
RoguePlanet.exe
Resource
win11ltsc2024-20260618-en
2 signatures
150 seconds
General
- Target RoguePlanet.exe
- Size 1.0MB
- Sample260620-a3s8vscw4j
- SHA256 08295dfde704bccce015af683ca95312d45564f7321bd64cc63c034b64e08080
- MD5 0122f736570bcc7c87fbaf2ee65bd05d
- SHA1 c3334d47197d7f88573688b352cb884d78d2d57e
- SHA512 88629899c5a01a8694285242131fc36417ee9c5380cf96e7d31806ee8af9456214e57bfb6241e9724997c68d0bd8ebd73016adf11735350f68a0e7a58a2d2622
- SSDEEP 3072:vXRerhZEs4H8rGu/znhUjgo7E4N0c0u2d8vWQCzfMPX:vXtjH8rXrnh68
- TLSH T194356D56B3A510F9E1378138C9920602F77378191760ABEF47A447B6AF336D4AD3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- NTFS ADS 1 IoCs
description ioc Process File created C:\Users\Admin\AppData\Local\Temp\RP_41018857-516d-40f7-849b-3d7738415f08\System32\wermgr.exe\:WDFOO RoguePlanet.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeManageVolumePrivilege 3368 RoguePlanet.exe Token: SeManageVolumePrivilege 3368 RoguePlanet.exe