Analysis
- user interaction
yes - max time kernel
6s - max time network
8s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
28/06/2026, 20:30
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
erto3e4rortoergn.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
erto3e4rortoergn.exe
Resource
win11ltsc2024-20260617-en
1 signatures
150 seconds
General
- Target erto3e4rortoergn.exe
- Size 5.4MB
- Sample260628-zalezset5m
- SHA256 d3d32daed7f5878bbf5f23b5174a9ec026a5c722432ab9faa3b7187509f21020
- MD5 4035ac82d429ada4ad1e42ae2446c33a
- SHA1 a8d1308538684ea5e59052e994c141399c23e3ce
- SHA512 574089591b6e69124a69f49151c6f29ab3173ab44217469be4c77f66f25d4d0141b5112e61c6d8aa9ff0050af27737107246f15b301b0c82487e9f9444a79fa1
- SSDEEP 49152:5zBLT/Lf1KxDIdoy3Hf9Seo48h/qNwffAj3g/bTqSk6hIIbnTehAegUP8uRoQd:vBHSew/lgQ/6STfMgUUM
- TLSH T151461A1FD1D53384C94A20363ADE9532FBB278497F15D5C64282E2AB395E8FD4EB4322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 4092 erto3e4rortoergn.exe 4092 erto3e4rortoergn.exe 4092 erto3e4rortoergn.exe 4092 erto3e4rortoergn.exe