Analysis

  • max time kernel
    150s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    23/06/2026, 00:19

General

  • Target
    Nostroller Options V2.0/Nostroller Options V2.0.exe
  • Size 13.6MB
  • Sample260623-amfmtshx21
  • SHA256 3fa2764c014a709e27292a0507bd59dad69fd34d008e791be5694f427a62004b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 11 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Nostroller Options V2.0\Nostroller Options V2.0.exe
    "C:\Users\Admin\AppData\Local\Temp\Nostroller Options V2.0\Nostroller Options V2.0.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    PID:4624

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        evbC33C.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\evbC33C.tmp
        • Size 1KB
        • SHA256 5bb17a4dc80f0f54009d0be4d106c88be127d46ed7d86ef2745d33b4cc106bf6
        • MD5 SHA1 SHA512 TLSH

        evbC39B.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\evbC39B.tmp
        • Size 1KB
        • SHA256 dcff47c82a87381125418cd812a3d668cfb6ce844430145c616566cf6b3c1132
        • MD5 SHA1 SHA512 TLSH

        evbC496.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\evbC496.tmp
        • Size 1KB
        • SHA256 17728a84ca88f2aebfc50773a88acb9dd8932af07d45927ce35258fd8cff4ba3
        • MD5 SHA1 SHA512 TLSH

        evbC5DF.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\evbC5DF.tmp
        • Size 1KB
        • SHA256 d62fe9ed38b323515e6bc72f6562b51515a306fc81e4c6462b6d394545fd1fc5
        • MD5 SHA1 SHA512 TLSH

        evbC5F0.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\evbC5F0.tmp
        • Size 1KB
        • SHA256 b749f0aaa37f1cb28248817d9af5a48d357594071f0a6b817b088f7c6d2a3d32
        • MD5 SHA1 SHA512 TLSH

        evbCF19.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\evbCF19.tmp
        • Size 1KB
        • SHA256 da8e1584e52135fbe21409fbe151cc07ef809fd355165789005518141cabaef1
        • MD5 SHA1 SHA512 TLSH

        evbCF88.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\evbCF88.tmp
        • Size 1KB
        • SHA256 ca5ad53f2e394808d6a2218d106d005a4ebb83b3886f000b595e706cfeee4bc0
        • MD5 SHA1 SHA512 TLSH

        evbCF99.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\evbCF99.tmp
        • Size 1KB
        • SHA256 f1220859a6d442aea66cecba0834953fd780192d5b6d58d449de351e9f183a0c
        • MD5 SHA1 SHA512 TLSH

        evbCFBA.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\evbCFBA.tmp
        • Size 1KB
        • SHA256 bc2ab365a5379ec166f6c4aca0850336dff63e63202c75b25e764178e8281a84
        • MD5 SHA1 SHA512 TLSH

        memory/4624-44-0x0000000002240000-0x0000000002308000-memory.dmp

        memory/4624-63-0x0000000004420000-0x000000000442A000-memory.dmp

        memory/4624-16-0x0000000002880000-0x0000000002FC4000-memory.dmp

        memory/4624-33-0x0000000180000000-0x00000001805BF000-memory.dmp

        memory/4624-35-0x00007FFF6AA50000-0x00007FFF6AC45000-memory.dmp

        memory/4624-43-0x00007FFF6AA50000-0x00007FFF6AC45000-memory.dmp

        memory/4624-40-0x0000000002240000-0x0000000002304000-memory.dmp

        memory/4624-39-0x0000000002210000-0x000000000221D000-memory.dmp

        memory/4624-38-0x0000000002210000-0x000000000221D000-memory.dmp

        memory/4624-34-0x00007FFF6AA50000-0x00007FFF6AC45000-memory.dmp

        memory/4624-32-0x00007FFF6AA50000-0x00007FFF6AC45000-memory.dmp

        memory/4624-28-0x0000000002FD0000-0x0000000003538000-memory.dmp

        memory/4624-24-0x0000000002FD0000-0x0000000003538000-memory.dmp

        memory/4624-20-0x00007FFF6AA50000-0x00007FFF6AC45000-memory.dmp

        memory/4624-23-0x00007FFF6AA50000-0x00007FFF6AC45000-memory.dmp

        memory/4624-55-0x00000000039D0000-0x00000000039F7000-memory.dmp

        memory/4624-58-0x00007FFF6AA50000-0x00007FFF6AC45000-memory.dmp

        memory/4624-5-0x0000000180000000-0x00000001805BF000-memory.dmp

        memory/4624-85-0x0000000004910000-0x000000000496A000-memory.dmp

        memory/4624-83-0x0000000004910000-0x000000000496A000-memory.dmp

        memory/4624-77-0x0000000004460000-0x00000000044D2000-memory.dmp

        memory/4624-75-0x0000000004460000-0x00000000044D2000-memory.dmp

        memory/4624-12-0x0000000002880000-0x0000000002FC4000-memory.dmp

        memory/4624-11-0x00007FFF6AA50000-0x00007FFF6AC45000-memory.dmp

        memory/4624-71-0x0000000002240000-0x0000000002308000-memory.dmp

        memory/4624-91-0x0000000004420000-0x000000000442E000-memory.dmp

        memory/4624-68-0x0000000004420000-0x000000000442E000-memory.dmp

        memory/4624-67-0x0000000004420000-0x000000000442E000-memory.dmp

        memory/4624-65-0x0000000180000000-0x00000001805BF000-memory.dmp

        memory/4624-92-0x0000000004460000-0x00000000044D2000-memory.dmp

        memory/4624-62-0x0000000004420000-0x0000000004490000-memory.dmp

        memory/4624-61-0x0000000004420000-0x000000000442C000-memory.dmp

        memory/4624-60-0x0000000004420000-0x000000000442C000-memory.dmp

        memory/4624-59-0x0000000004420000-0x0000000004431000-memory.dmp

        memory/4624-57-0x00007FFF6AA50000-0x00007FFF6AC45000-memory.dmp

        memory/4624-53-0x00000000039D0000-0x00000000039F7000-memory.dmp

        memory/4624-3-0x00007FFF6AAED000-0x00007FFF6AAEE000-memory.dmp

        memory/4624-50-0x00000000039D0000-0x00000000039F6000-memory.dmp

        memory/4624-47-0x0000000002240000-0x0000000002308000-memory.dmp

        memory/4624-0-0x0000000140000000-0x00000001401C7000-memory.dmp

        memory/4624-87-0x0000000002880000-0x0000000002FC4000-memory.dmp

        memory/4624-88-0x0000000002FD0000-0x0000000003538000-memory.dmp

        memory/4624-95-0x0000000004440000-0x000000000444E000-memory.dmp

        memory/4624-94-0x0000000004910000-0x000000000496A000-memory.dmp

        memory/4624-4-0x00007FFF6AA50000-0x00007FFF6AC45000-memory.dmp

        memory/4624-93-0x00000000044F0000-0x00000000044FD000-memory.dmp

        memory/4624-70-0x00007FFF6AA50000-0x00007FFF6AC45000-memory.dmp

        memory/4624-90-0x00000000039D0000-0x00000000039F7000-memory.dmp

        memory/4624-89-0x0000000002210000-0x000000000221D000-memory.dmp

        memory/4624-97-0x0000000180000000-0x00000001805BF000-memory.dmp

        memory/4624-98-0x0000000002880000-0x0000000002FC4000-memory.dmp

        memory/4624-101-0x0000000002240000-0x0000000002308000-memory.dmp

        memory/4624-96-0x0000000140000000-0x00000001401C7000-memory.dmp

        memory/4624-108-0x00007FFF6AA50000-0x00007FFF6AC45000-memory.dmp

        memory/4624-109-0x00007FFF6AA50000-0x00007FFF6AC45000-memory.dmp

        memory/4624-110-0x0000000180000000-0x00000001805BF000-memory.dmp

        memory/4624-111-0x0000000002240000-0x0000000002308000-memory.dmp

        memory/4624-112-0x0000000002880000-0x0000000002FC4000-memory.dmp

        memory/4624-113-0x0000000002FD0000-0x0000000003538000-memory.dmp

        memory/4624-115-0x0000000180000000-0x00000001805BF000-memory.dmp

        memory/4624-119-0x0000000002240000-0x0000000002308000-memory.dmp

        memory/4624-116-0x0000000002880000-0x0000000002FC4000-memory.dmp

        memory/4624-117-0x0000000002FD0000-0x0000000003538000-memory.dmp

        memory/4624-128-0x0000000002880000-0x0000000002FC4000-memory.dmp

        memory/4624-131-0x0000000002240000-0x0000000002308000-memory.dmp

        memory/4624-129-0x0000000002FD0000-0x0000000003538000-memory.dmp

        memory/4624-139-0x0000000180000000-0x00000001805BF000-memory.dmp

        memory/4624-143-0x0000000002240000-0x0000000002308000-memory.dmp

        memory/4624-141-0x0000000002FD0000-0x0000000003538000-memory.dmp

        memory/4624-140-0x0000000002880000-0x0000000002FC4000-memory.dmp

        memory/4624-152-0x0000000002880000-0x0000000002FC4000-memory.dmp

        memory/4624-153-0x0000000002FD0000-0x0000000003538000-memory.dmp

        memory/4624-164-0x0000000002880000-0x0000000002FC4000-memory.dmp

        memory/4624-167-0x0000000002240000-0x0000000002308000-memory.dmp

        memory/4624-165-0x0000000002FD0000-0x0000000003538000-memory.dmp

        memory/4624-177-0x0000000002FD0000-0x0000000003538000-memory.dmp

        memory/4624-189-0x0000000002FD0000-0x0000000003538000-memory.dmp

        memory/4624-203-0x0000000002240000-0x0000000002308000-memory.dmp

        memory/4624-201-0x0000000002FD0000-0x0000000003538000-memory.dmp

        memory/4624-200-0x0000000002880000-0x0000000002FC4000-memory.dmp

        memory/4624-213-0x0000000002FD0000-0x0000000003538000-memory.dmp

        memory/4624-225-0x0000000002FD0000-0x0000000003538000-memory.dmp

        memory/4624-239-0x0000000002240000-0x0000000002308000-memory.dmp

        memory/4624-236-0x0000000002880000-0x0000000002FC4000-memory.dmp

        memory/4624-237-0x0000000002FD0000-0x0000000003538000-memory.dmp

        memory/4624-246-0x0000000140000000-0x00000001401C7000-memory.dmp

        memory/4624-249-0x0000000002FD0000-0x0000000003538000-memory.dmp

        memory/4624-258-0x0000000140000000-0x00000001401C7000-memory.dmp

        memory/4624-261-0x0000000002FD0000-0x0000000003538000-memory.dmp