Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
23/06/2026, 07:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
arc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
arc.exe
Resource
win11ltsc2024-20260618-en
4 signatures
150 seconds
General
- Target arc.exe
- Size 15.9MB
- Sample260623-hvm1wabs81
- SHA256 f96dbc7be538a97d9f21b9686faeb1a129dda5cb7a7ba155679a73d8e86bcfa0
- MD5 b9b1d5b91d1e4a241be3fa4a02b7bd48
- SHA1 2348cc86506021c993c388bdd5473596ac95c770
- SHA512 856b0a3f1b09f1854ce3e80c9c14f9260706bfbf8f45273ccbf688bd879e7ccd73451ace773c8877890648c5e88814b5672afa70a016ae547a4a3403b2ffc269
- SSDEEP 196608:mWcCIBqC9d8sstq5OTQNE9ScYErt2vuVIY5+fFybya55X55NuCfUap:YrBn8sstq5O+gSr
- TLSH T134F65B32A29642F3E52DC07D8F851A32B8B231424B19BADB45C7EB160D11FD4AE75FB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Malware Config
Signatures
- Drops file in Drivers directory 1 IoCs
description ioc Process File created C:\Windows\System32\drivers\cocacola.sys arc.exe - Executes dropped EXE 1 IoCs
pid Process 3028 cocacola.sys - Suspicious behavior: LoadsDriver 3 IoCs
pid Process 808 Process not Found 808 Process not Found 808 Process not Found - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeSystemtimePrivilege 4564 arc.exe Token: SeSystemtimePrivilege 4564 arc.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Windows\System32\drivers\cocacola.sys
- Size 3.8MB
- SHA256 6f260f1322b683942a7174945670433a3e8fab88374043d9c4684f1cac82bc8a
- MD5 3e52d5a27ac62cf199079ce15b491b7f
- SHA1 b23a07aa2d80ea896eb283deb72ad146d5827c40
- SHA512 e5c78cfa712f6f491fd575fcf22b407d69054f3b344391a2f9091bbeda1697b629b7c5a69ef497ff3b1658e9999057cb601607ca25ec32ad44da4ecc1403fc40
- SSDEEP 24576:3vsNNGPtdolYdlNh04Z6QH348XY1fu1nZQIQUJfsucaHhcoBUAYGi3WOjGG:3ULmtNd504Z6QX3Y1fu1JXfInSdOaG
- TLSH T1DF06C43155A66273EB1A827E4ED56C7531F633032D0EBAE384C3FA644D044DE9A64FB8
- MD5 SHA1 SHA512 SSDEEP TLSH