Analysis
- user interaction
yes - max time kernel
150s - max time network
128s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
28/06/2026, 17:28
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
meccha-camouflage.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
meccha-camouflage.exe
Resource
win11ltsc2024-20260618-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target meccha-camouflage.exe
- Size 2.0MB
- Sample260628-v18wraav3s
- SHA256 62c55ad8e46f2fbbea7ee118c8d2bf159b79dcad3001944f5309e220d62193a8
- MD5 f04752091c12031fd17c1e4fd573ccc7
- SHA1 b287c27dc856d50d4f2c061b7e9b15d5b62bff49
- SHA512 cbfbed3451331ecaa831fffc04ac7822759d0b2d0a58b46aa42c8a1940455a60a3433cf24676aade11aec2a09cdfad428dd71a46038c83f379f6e764387da617
- SSDEEP 49152:fEv3eKrQ0segXnWxgcUJpFR6M5ZnwUQyI3:f7lezUZR6M5ZnwUDI
- TLSH T176A59E1667D911B8E0B6D239CE674957DB3278480B7096EF03D0099A1FB7BE09B37B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe 6320 meccha-camouflage.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 6320 meccha-camouflage.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 6320 meccha-camouflage.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\MecchaCamouflage\runtime\last_status.json
- Size 302B
- SHA256 6e95d0069743ce73a45b9cfaa8258eefd95ab3a554205f7f714b42dc709dde05
- MD5 463941492bf1db65842dc6ed650f8922
- SHA1 f67b1afa1d067939b79661bdecda00c70b29d1c0
- SHA512 063d31533d5353c2576f58d495df20d43bf1e52ed9cd0a060811e1b2bcee942bdbc82c947f433b0c18c2e1a7562587cae4e0a4033bcbe6d8a3b417b822364743
- TLSH T1D1E02B3CEABDAE635AC4C50D3C7BF613936B8DE5B1C13D10C50709B4D64E62488B2643
- MD5 SHA1 SHA512 TLSH