Analysis
- max time kernel
90s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260617-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
21/06/2026, 17:40
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
vortix loader.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
vortix loader.exe
Resource
win11ltsc2024-20260617-en
2 signatures
150 seconds
Errors
Reason
Machine shutdown
General
- Target vortix loader.exe
- Size 172KB
- Sample260621-v86flaev2j
- SHA256 c9055a7d58c77ff4db457ef5cac4db672e2e1f708d79aa4b88b7f7faffa9f54a
- MD5 09545c5d9a4719eee6d8bd4502d0a070
- SHA1 5feb0ad509bfb3df6adedc8b1149ae537b48de65
- SHA512 3dbd162c3edf0b8630001abe0a428402d218045920231170d3dd3fea364deee715579d7ddec059e666a5afc3687402fceabfaa223829b3c352d14662729ac9a1
- SSDEEP 3072:UTbCDEXO4v7Z1zctNmdkWUmXJ2+dRq8EZ/XovdRLOHg4HoZAz:UTbCIJN1QtCY+JdknQuHXoO
- TLSH T1FD044B57B3E634FCE5B7C27485A20A55A772B83517209FEF039486261F23AD05E3DB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PhysicalDrive0 vortix loader.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeShutdownPrivilege 3848 vortix loader.exe