Analysis
- max time kernel
150s - max time network
130s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
27/06/2026, 15:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MonkeModManager.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
MonkeModManager.exe
Resource
win11ltsc2024-20260618-en
2 signatures
150 seconds
General
- Target MonkeModManager.exe
- Size 92.5MB
- Sample260627-strb1sb13l
- SHA256 727c70974b8bd0f31398d7d620839b142c2bf56e3cd9556fab7e7c1474e0bc16
- MD5 15a0ab433abf5e315923cb1cab3334ed
- SHA1 0548d9edbfa81a27631ba5088a87fdccbe20eff8
- SHA512 ee680f429febc064cd78e405009f5011ad022b1dcec00e17fb334903524c6d93625cb0bf954308d22f336004246ebae3103fb481809f69ddc16ed079034afbda
- SSDEEP 786432:AGHwgVWxF2G4RkRqWpHSBwVrQ0rI+goU5Jb+qqliF:3H3VWxF23cHEhyqwiF
- TLSH T18928BF15B3E80A16D57FC27CC2638112E7B1B8831721D6CF1594EA592FA3BD16B3B362
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
pid Process 5020 MonkeModManager.exe 5020 MonkeModManager.exe 5020 MonkeModManager.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 5020 MonkeModManager.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\.net\MonkeModManager\LOdOhLMFuRxvgMpMwJlzYM7Cmq4nSv0=\av_libglesv2.dll
- Size 4.2MB
- SHA256 caff1be1faee32f7c5bfba9162ee617c347aad40772caa9a1aff794e3a191420
- MD5 0c6d7ef9f90b40fe51e67a2ff9f38244
- SHA1 d6cbf5d5b9957028d75d2456f1209b2454072367
- SHA512 b4cf85ea6be1c8528bfa6126a81faf44132b6978a07cf01af729f68807c7db6ae16fe71eb74135c9db9fe7696094d89330a94217c953b2ee5cce9be4a4e33373
- SSDEEP 49152:aYV2dj6IAWlax8aR1MCphVaEoJ9yjo2X8cC8P2B+79IP3aW2NcBVKrf+YQ2CsGV:aYVuj8eW43d2
- TLSH T187267D57B6A500ABC8BBC13CC957960BE3F1F85503A087CB21A8576D6F637E05A7B324
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\MonkeModManager\LOdOhLMFuRxvgMpMwJlzYM7Cmq4nSv0=\libHarfBuzzSharp.dll
- Size 1.5MB
- SHA256 a54cfda99ffb965d4daa307c381763051ee638b629bfc0f424feb7a8046a7e36
- MD5 18c3db11db291ae7b7b975eee8a4e381
- SHA1 151d5be933698a611f24a3b20a77f1e7f9c7ac03
- SHA512 c93f2026aababc2fd4e812ab4640f0c783d4c1542a0b91ba600534f36b086b1d577ccadedc5d3ba82084b8e01d57f20c8221271651fd48e997184406d783a696
- SSDEEP 49152:9By4VCDmxqVx/1hlcsHI7woyGYdwENua6m4x:oQkPNuL
- TLSH T1B675AE4AE26A11E9D8ABD074C656840BD3B274420F14DFFF56E08695EF23EF51A7E320
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\MonkeModManager\LOdOhLMFuRxvgMpMwJlzYM7Cmq4nSv0=\libSkiaSharp.dll
- Size 9.0MB
- SHA256 9a0d95e8caaa852c70d085af6a40a744242172ad9ea3fd6bc7599875a8a1dbcd
- MD5 ef1fabce43fe32ca83260481253f5476
- SHA1 ad988af9826e5aacc7b8e5ed6d220b229d70060e
- SHA512 f73b56742e43b169177ff49f639c50f98a417f91175c70f7348bde1c7570c2838c181a59b628b003eb2618d75da920a449a724cccaec1dae8b9a80d5aac386f6
- SSDEEP 98304:4GKXmtfLM9j2KAdTzwlrdyc8HgGTngmY6+o/:cXmlLMvGsIaGjb
- TLSH T19B964A03B66B64ACC04AC474834B99665E2038CB0B35BCEF52C5A1393FB9BF46F79615
- MD5 SHA1 SHA512 SSDEEP TLSH