Analysis
- max time kernel
52s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
20/06/2026, 13:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Immortal EMu.exe
Resource
win10ltsc2021-20260513-en
3 signatures
300 seconds
Behavioral task
behavioral2
Sample
Immortal EMu.exe
Resource
win11-20260513-en
3 signatures
300 seconds
General
- Target Immortal EMu.exe
- Size 715KB
- Sample260620-qrg98afs8m
- SHA256 111176e9b0a0a8c938a4099f9d8c43958f63bec5a72e2b9e8aa699c2a74173bb
- MD5 eabc58a405340d4d2b0ca94a42a40b64
- SHA1 364179e48b619c4ced4fcf98eaf4fb76d7450ca8
- SHA512 ba7cd213652ee55de2a698e3b1ccddfeafaace768c9201d49e84ad35e94b2679820280396baf49f0857ec62a0ed0c0fc520add68b32c1a2befc1eba3f3407447
- SSDEEP 12288:EXdUdU/lbUIHENT2Nn4T4e5l1P7SRWcydzARcmEg+:udUdUtD6T2Nn4T4m3PxtdzARPE5
- TLSH T121F4AE03F3528ADAC55A4878A493E337FB753C1C0754C6CBB7B4AE25AB9B6D02D69340
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 54 IoCs
pid Process 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe 3180 Immortal EMu.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3180 Immortal EMu.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3180 Immortal EMu.exe