Overview
overview
8Static
static
3OpenCvSharpExtern.dll
windows10-2004-x64
1OpenCvSharpExtern.dll
windows11-ltsc_2024-x64
1Spectrum.exe
windows10-2004-x64
1Spectrum.exe
windows11-ltsc_2024-x64
1cimgui.dll
windows10-2004-x64
1cimgui.dll
windows11-ltsc_2024-x64
8opencv_vid...64.dll
windows10-2004-x64
1opencv_vid...64.dll
windows11-ltsc_2024-x64
1Analysis
- max time kernel
149s - max time network
139s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
24/06/2026, 15:01
Static task
static1
Behavioral task
behavioral1
Sample
OpenCvSharpExtern.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
OpenCvSharpExtern.dll
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral3
Sample
Spectrum.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Spectrum.exe
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral5
Sample
cimgui.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
cimgui.dll
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral7
Sample
opencv_videoio_ffmpeg4110_64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
opencv_videoio_ffmpeg4110_64.dll
Resource
win11ltsc2024-20260617-en
General
- Target Spectrum.exe
- Size 3.3MB
- Sample260624-sd558scz8x
- SHA256 95d544d8011571bb3ced5787aa02f63ed0ef3e44d1c7945b1d7a28e464d67851
- MD5 062249c9949095aa572d8eec67531705
- SHA1 e648be93b7a61acd12c21a3bee6c2911a4fe7660
- SHA512 6bfc626bbdcbab7757ac6839c37cbfd9ee94aeee4554157a7477aa46d81487f86f386c6cd910b010e786d4017f074d84e76a95ad2f36ae35d3bcb5c08c86563d
- SSDEEP 49152:li+wEbOl1m4Tf8Ul/NAgEhpxl97V0rEI/avPbzbQIR7jB7bjMsIlhgg:9wE41tbxLEhN97qrkPbdjtCCg
- TLSH T1BAF52215A3E8062AE1BF4B7A99710542D731B4979B23E7CF36AC50AD0FA7BC05D24723
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 5608 Spectrum.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 5608 Spectrum.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\bin\configs\colors\Arsenal [Magenta].json
- Size 229B
- SHA256 53e0e2b816d81c4c26cb32674bfad32b82105414a71020c83ea95179e91bdac5
- MD5 bbec73a08baaede2d5a5a16d585b2469
- SHA1 da2c04e6feea7e89be645aca9830e2fd76e70016
- SHA512 571b31018e3bd04ed6ba3b7e3aa893f611e5f1309264de2d6ee4f86169575c9ddb2dd60afc85560b5a9d395a235561c4959bf5d58e4c9e18d6d1ffccf826df39
- TLSH T184D0EAF0D6446D8532BC9264687083D3E280E7AB56625C0BB6B355AC6F7B0268184B46
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\bin\configs\colors\Combat Surf [Red].json
- Size 225B
- SHA256 d70b27353ff75b72b8e7c33bc881ca760579433b25fcc5480e6f22da9875f096
- MD5 ddf64ccb08f6fbb5ca7661bba0ee7d4f
- SHA1 9db9dce8ebaf19e8e93d6bcefdfec2a5ece100ed
- SHA512 72522f750cee069eb9599c24701cc188d4c023bf554db4c12bbffbe7e33b35d88031b272a1fb170d145fce6db90b0e49e12e17dfa43f7a95b8989a60fc6a9411
- TLSH T1C7D0EAF4C6046D8636BC4210547587C3E284F77B4A629C07BAF368AD2F7B4238044B46
- MD5 SHA1 SHA512 TLSH