8c9c25dab7f16a4192c8db12df916edeb5b2c1cfbfd94f8e81cd3a9c7d456a82

Resubmissions

09/07/2026, 14:19

09/07/2026, 14:18

user interaction
yes
max time kernel
48s
max time network
53s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/07/2026, 14:18

Target
=?iso-8859-1?Q?SOA-T-n=B00782026=5Fpillowurbanstay.xls?=
Size 173KB
Sample260709-rmgcssby3p
SHA256 8c9c25dab7f16a4192c8db12df916edeb5b2c1cfbfd94f8e81cd3a9c7d456a82
MD5 79e6c9d5b2a30dc157c4597b0306e6ee
SHA1 7b0219aa2149b7b1de3f356838fa4745a2079229
SHA512 959e594efe34b485333e09b8ce7e5f6a4cf15e59f84a32bf195ab56209b01d8fe8db18b8db8607e8249f89c09a437ab5248b5c38d922ad02192103b7858246c1
SSDEEP 3072:FSFsv66g3KnF439NKCdcIwqf7hpoLPEW6U0gq3vBvE2Hs6Q4fpfh5qVKdgr+3g0J:FSFsv66g3KnF439NKCdcIw+7XoL8U0gc
TLSH
T19604E096BBE6C94DDC8617360AA04B716267FC801EDAD20BB208F71C1EF1ED24D416E7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1892	sihost.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\=_iso-8859-1_Q_SOA-T-n=B00782026=5Fpillowurbanstay.xls_=
1⤵
PID:3360

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2032

C:\Windows\system32\sihost.exe
sihost.exe
1⤵
- Suspicious use of FindShellTrayWindow
PID:1892
- C:\Windows\explorer.exe
  explorer.exe /LOADSAVEDWINDOWS
  2⤵
  PID:4832