Analysis
- user interaction
yes - max time kernel
149s - max time network
130s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
05/07/2026, 12:12
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WindowsProject4.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
WindowsProject4.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
General
- Target WindowsProject4.exe
- Size 116KB
- Sample260705-pdbpvact3t
- SHA256 3f96921b8a0cc6e6f7f1b09c0f8d366dc8f1ea892969fbe5ffc5cc101fe34b39
- MD5 a8a3bab19f365c19c59fd059b46256c6
- SHA1 009432bf9e8305a5943805bed056ade83eeb5eff
- SHA512 27e8eba8dbcca29b82bf5f88bcc50d2ae1b50d7def14bb41f47d963550a82e41fa9e3e3a11cbcb870cf367305cbb4b465908db0ed23d98fd5c8a2bd1ff788e4e
- SSDEEP 384:I3hgCA+KL2lRufznjLCyIUO1KB7EgLBBGA+ZhLDwKPj7pVpo99Sjvb99SjvWp2:i1hHkIUOHgzqrP77pk9Sbh9Sbj
- TLSH T109C394439AEC3CC7C03893B473BB93D5C72EED55A2A2C18E96D00295D8BD59739227D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 4 discord.com 3 discord.com - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 716 WindowsProject4.exe