Overview
overview
3Static
static
3NBTExplorer.exe
windows10-2004-x64
1NBTExplorer.exe
windows11-ltsc_2024-x64
1NBTModel.dll
windows10-2004-x64
1NBTModel.dll
windows11-ltsc_2024-x64
1NBTUtil.exe
windows10-2004-x64
1NBTUtil.exe
windows11-ltsc_2024-x64
1Substrate.dll
windows10-2004-x64
1Substrate.dll
windows11-ltsc_2024-x64
1Analysis
- user interaction
yes - max time kernel
149s - max time network
148s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
05/07/2026, 04:39
Static task
static1
Behavioral task
behavioral1
Sample
NBTExplorer.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
NBTExplorer.exe
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral3
Sample
NBTModel.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
NBTModel.dll
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral5
Sample
NBTUtil.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
NBTUtil.exe
Resource
win11ltsc2024-20260629-en
Behavioral task
behavioral7
Sample
Substrate.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Substrate.dll
Resource
win11ltsc2024-20260629-en
General
- Target NBTExplorer.exe
- Size 419KB
- Sample260705-e9zrfac17k
- SHA256 c5e26b88085ad4aa60a434d2554eaaa4f3c4a37aa26b12f40b70fb0c7f6d6a3f
- MD5 7d39ad6228157eba3d4872afeaf042b0
- SHA1 48af98d067af2417901a29151ff486ff11cf1bfa
- SHA512 0a730945d2194e3fe82620cd5ae8fdd8bac887b42a08aa85ca1eb06f34591c29b2656fa5c30105cbcb938b299741ec3ee4fb5682b58e9d5ef741b1470e365cf5
- SSDEEP 6144:HT3HMf+RNxc8/y7ALvLLLIgjjgL6FlvLLLYgjjgL:HG8
- TLSH T147943B013768CD3BC56D4379146541C447BF6C5B909AD68FB880F2EE3AF37626A8B293
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3624 NBTExplorer.exe