Analysis
- user interaction
yes - max time kernel
38s - max time network
169s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260706-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
07/07/2026, 00:19
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Another One v0.1.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Another One v0.1.exe
Resource
win11ltsc2024-20260706-en
3 signatures
150 seconds
General
- Target Another One v0.1.exe
- Size 247.4MB
- Sample260707-ampkqsbt4p
- SHA256 d0db1b411a99395e3a9b144d5b5ccc8ec8da7d0b4573d13a7b3cc6f99861f4a1
- MD5 c1a047786e1f1ece7485e084a4dbd1b0
- SHA1 24a4221aeb62a5ef09506accf7ad683e72613a68
- SHA512 32dbcf8412e6cfada6de27ecf8c630a4b08a9a1d3c0ffcc3d81f8684688c2a102c0589964256127b56472373ae4ef1fc3ffcd5568180deec2627befb7233b772
- SSDEEP 3145728:/Kag+Q9FrE7Fv3Lob/zPjogMSxiCXcZVpt89/sbHkU7OzNdtqRvjPBx+aF3gp2gy:yb+Q9FKFvL2nMSupt89OEhXID9fv
- TLSH T1ECC8D053F2B370ECC56BC23492DB6633FA33BC5851346D6AD6A0DB742E21E506729E24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3575702013-381963388-2545377694-1000_Classes\Local Settings Another One v0.1.exe - Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 3360 Another One v0.1.exe 5644 sihost.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3360 Another One v0.1.exe 3360 Another One v0.1.exe 3360 Another One v0.1.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Another One v0.1.exe"C:\Users\Admin\AppData\Local\Temp\Another One v0.1.exe"1⤵
- Modifies registry class
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:3360
-
C:\Windows\system32\sihost.exesihost.exe1⤵
- Suspicious use of FindShellTrayWindow
PID:5644 -
C:\Windows\explorer.exeexplorer.exe /LOADSAVEDWINDOWS2⤵PID:252
-
-
C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca1⤵PID:3976
-
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca1⤵PID:2852
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
- Size 607B
- SHA256 be6b74e52e5eef1f1c27c0976bf3bf1bfa99958c00bbef2898a602f691be6dae
- MD5 76b78ed7ff6273215b134d6a6488035d
- SHA1 9e7a11ffb68d027036302eccd4c22315054843a9
- SHA512 9919504cd4d8c0757abff8da4bbad1c4b6532f81d290c736fc5624ef66de45e6a9e29a8290854ae554d5bdfc5291f1ea81ae62d1b25846bfbcf1515e2ec3e4f1
- TLSH T174F0DC53CBD6536BD527223CC8E207E1FA70E2719E81212386106F2D6CB77241E474B4
- MD5 SHA1 SHA512 TLSH