Analysis
- user interaction
yes - max time kernel
358s - max time network
336s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
03/07/2026, 03:59
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
03072026_0359_Demanda_Laboral_Reinstalacion_Salarios_Caidos_TOCA9190.exe
Resource
win10v2004-20260513-en
2 signatures
300 seconds
Behavioral task
behavioral2
Sample
03072026_0359_Demanda_Laboral_Reinstalacion_Salarios_Caidos_TOCA9190.exe
Resource
win11ltsc2024-20260629-en
2 signatures
300 seconds
General
- Target 03072026_0359_Demanda_Laboral_Reinstalacion_Salarios_Caidos_TOCA9190.exe
- Size 160KB
- Sample260703-ej24wabs6v
- SHA256 54717911cc6ad7152c094a8623ba2a7d4c00905760903cdce970b87563880c8f
- MD5 d4993a379e8273bbbf8b6fe68e676a00
- SHA1 cfe49e9fa710540b011a9d56df82d97f29973a49
- SHA512 b7795e65ce5b81a6b32f8d1dfdf1deb9afcea157a73af356ab8a35f65dc51c7d3f1bfd30ad6cb5f3c02772b808864b12b818d87daeba4cc299b8eca220288a27
- SSDEEP 3072:sDR8ulJgZ8KTjtucULmUcFpCehdHV/K5fCIpS:6R8q28KTjtvUIcehdH1uS
- TLSH T137F36C0BB7A425F9E1778278C8A10A42F772B87507609BDF03A047765F672E09D3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Drops startup file 2 IoCs
description ioc Process File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\WinServiceHost.exe 03072026_0359_Demanda_Laboral_Reinstalacion_Salarios_Caidos_TOCA9190.exe File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\WinServiceHost.exe 03072026_0359_Demanda_Laboral_Reinstalacion_Salarios_Caidos_TOCA9190.exe - Suspicious behavior: RenamesItself 1 IoCs
pid Process 4372 03072026_0359_Demanda_Laboral_Reinstalacion_Salarios_Caidos_TOCA9190.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\WinServiceHost.exe
- Size 160KB
- SHA256 bfdea6e2075f558750f70a56f11bb74a7167b62825430b25e0549ac420c1f5c5
- MD5 d8bbc9bb26c9a9bbf9b5076a62e1613d
- SHA1 0190dbcda925af4739274f04836d720fa258a232
- SHA512 9d2d46cc4c7caa73f8e3e86e7b18f5ace4a99a5adcb4ef524661d86d19b4935444714d19b69f01b1fc15139dfab9de72362479f367ba5fe3aaa146999d4d4f9c
- SSDEEP 3072:JDR8ulJgZ8KTjtucULmUcFpCehdHV/K5fCIpS:RR8q28KTjtvUIcehdH1uS
- TLSH T1F4F36C0BB7A425F9E1778278C8A10A42F772B87507609BDF03A047765F672E09D3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH