Analysis
- max time kernel
10s - max time network
10s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
- submitted
02/07/2026, 16:52
General
- Target RisenwareBloodstrike.exe
- Size 1.7MB
- Sample260702-vdepdsft3l
- SHA256 b9e4020f5968e8ff1b53add888e0be36adaf07556466ef9c126d23447b09e2a0
Score
6/10
Malware Config
Signatures
- Looks up external IP address via web service 2 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
Processes
-
C:\Users\Admin\AppData\Local\Temp\RisenwareBloodstrike.exe"C:\Users\Admin\AppData\Local\Temp\RisenwareBloodstrike.exe"1⤵