Analysis
- user interaction
yes - max time kernel
149s - max time network
149s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
29/06/2026, 19:14
Behavioral task
behavioral1
Sample
Built_Stub.exe
Resource
win10ltsc2021-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Built_Stub.exe
Resource
win11-20260513-en
2 signatures
150 seconds
General
- Target Built_Stub.exe
- Size 2.0MB
- Sample260629-xxtc1aev8p
- SHA256 e163c5e45cb720d501ae86bbe70328a8ccafa484c95e16945c88cee14f7ec899
- MD5 42b67aaf125289cf34d9ab0d9da4d088
- SHA1 04436b1c86ccccf39204c62c4893e413a7751286
- SHA512 a853c02cd889a1512681df29b31481b8731657ccf4cdf77394dd3a00357330746484d42724011edd40d31f8830c6c6fb84cf564605649ffbe645215d307a675a
- SSDEEP 24576:s5uYyQO8hVDs/5IdhtQFujoh6m6vBsZZ5PXQBJOKdkjnoor0PfSIgZlHVvtRJQOh:gno8haujVsPAB8KY2+Bz+2
- TLSH T10BA58E46B3A501F8D477C078CD466217FA72B4041774ABEB55A08A6A2F33FE13ABE315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 1 ip-api.com - Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 Built_Stub.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString Built_Stub.exe