Analysis
- user interaction
yes - max time kernel
6s - max time network
78s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
21/06/2026, 15:23
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ExcuseMeSir.zip
Resource
win10v2004-20260513-en
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
ExcuseMeSir.zip
Resource
win11ltsc2024-20260618-en
0 signatures
900 seconds
Behavioral task
behavioral3
Sample
ExcuseMeSir.exe
Resource
win10v2004-20260513-en
3 signatures
900 seconds
Behavioral task
behavioral4
Sample
ExcuseMeSir.exe
Resource
win11ltsc2024-20260618-en
3 signatures
900 seconds
Behavioral task
behavioral5
Sample
ExcuseMeSir.pck
Resource
win10v2004-20260513-en
8 signatures
900 seconds
Behavioral task
behavioral6
Sample
ExcuseMeSir.pck
Resource
win11ltsc2024-20260617-en
5 signatures
900 seconds
General
- Target ExcuseMeSir.exe
- Size 99.7MB
- Sample260621-ssh91sdy7r
- SHA256 1b29f2f2867f640b0db09ced742014c9054aa344c421b03a17a67f71cabbb9e4
- MD5 db14872708e5a72c7b05c084bb812dfd
- SHA1 3e0fbda5f41681a934424bed281434b4c26e7d25
- SHA512 a1933ac4839324f9a2f33daf60dd563a01d76dec2c9ce2093cb367b75bb02fa8eda081f423a47ff5fd81abd4f5952bcf87df5f0a7af68ce1876ffc9bb177d392
- SSDEEP 786432:4MawySSDgRl5eKUMNlz2721YhyItnQAiyWkHQ:4MaESgRl5eKFNlCSBItOkHQ
- TLSH T1E8383B53F2B370ECC567C13092DBA633FA73B85951356E6AD6A0CB742F21E506329E24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings ExcuseMeSir.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2388 ExcuseMeSir.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2388 ExcuseMeSir.exe 2388 ExcuseMeSir.exe 2388 ExcuseMeSir.exe