Overview
overview
10Static
static
10malware-sa...ce.exe
windows10-2004-x64
1malware-sa...ce.exe
windows11-ltsc_2024-x64
1malware-sa...9d.exe
windows10-2004-x64
7malware-sa...9d.exe
windows11-ltsc_2024-x64
3malware-sa...29.rtf
windows10-2004-x64
10malware-sa...29.rtf
windows11-ltsc_2024-x64
10malware-sa...90.rtf
windows10-2004-x64
1malware-sa...90.rtf
windows11-ltsc_2024-x64
1malware-sa...64.rtf
windows10-2004-x64
1malware-sa...64.rtf
windows11-ltsc_2024-x64
1malware-sa...24.rtf
windows10-2004-x64
1malware-sa...24.rtf
windows11-ltsc_2024-x64
1malware-sa...37.rtf
windows10-2004-x64
1malware-sa...37.rtf
windows11-ltsc_2024-x64
1malware-sa...61.rtf
windows10-2004-x64
1malware-sa...61.rtf
windows11-ltsc_2024-x64
1malware-sa...79.rtf
windows10-2004-x64
1malware-sa...79.rtf
windows11-ltsc_2024-x64
8malware-sa...c4.rtf
windows10-2004-x64
1malware-sa...c4.rtf
windows11-ltsc_2024-x64
1malware-sa...86.rtf
windows10-2004-x64
10malware-sa...86.rtf
windows11-ltsc_2024-x64
10malware-sa...2f.rtf
windows10-2004-x64
10malware-sa...2f.rtf
windows11-ltsc_2024-x64
10malware-sa...1d.rtf
windows10-2004-x64
1malware-sa...1d.rtf
windows11-ltsc_2024-x64
1malware-sa...2d.rtf
windows10-2004-x64
1malware-sa...2d.rtf
windows11-ltsc_2024-x64
1malware-sa...5a.rtf
windows10-2004-x64
1malware-sa...5a.rtf
windows11-ltsc_2024-x64
8malware-sa...d5.rtf
windows10-2004-x64
1malware-sa...d5.rtf
windows11-ltsc_2024-x64
1Analysis
- max time kernel
149s - max time network
114s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/07/2026, 16:48
Static task
static1
Behavioral task
behavioral1
Sample
malware-samples-master/2018-05-KPOT/36dcd40aee6a42b8733ec3390501502824f570a23640c2c78a788805164f77ce.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
malware-samples-master/2018-05-KPOT/36dcd40aee6a42b8733ec3390501502824f570a23640c2c78a788805164f77ce.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
malware-samples-master/2018-05-KPOT/67f8302a2fd28d15f62d6d20d748bfe350334e5353cbdef112bd1f8231b5599d.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
malware-samples-master/2018-05-KPOT/67f8302a2fd28d15f62d6d20d748bfe350334e5353cbdef112bd1f8231b5599d.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
malware-samples-master/2018-08-RTF-Byte-Nibble-Obfuscation/008d54ba06ec1b5fd909c1e0e9d9ba9a23c6d9a11d6e0f6910877e639b31c529.rtf
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
malware-samples-master/2018-08-RTF-Byte-Nibble-Obfuscation/008d54ba06ec1b5fd909c1e0e9d9ba9a23c6d9a11d6e0f6910877e639b31c529.rtf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
malware-samples-master/2018-08-RTF-Byte-Nibble-Obfuscation/0655d58db2798ad8336f92dd580f988312f37f3e52b405c9c71d3afd2bd2c290.rtf
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
malware-samples-master/2018-08-RTF-Byte-Nibble-Obfuscation/0655d58db2798ad8336f92dd580f988312f37f3e52b405c9c71d3afd2bd2c290.rtf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
malware-samples-master/2018-08-RTF-Byte-Nibble-Obfuscation/0c91e70676609b765e4d20afa992660f306798af60f9c164dd41336590636864.rtf
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
malware-samples-master/2018-08-RTF-Byte-Nibble-Obfuscation/0c91e70676609b765e4d20afa992660f306798af60f9c164dd41336590636864.rtf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
malware-samples-master/2018-08-RTF-Byte-Nibble-Obfuscation/10ceb5916cd90e75f8789881af40287c655831c5086ae1575b327556b63cdb24.rtf
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
malware-samples-master/2018-08-RTF-Byte-Nibble-Obfuscation/10ceb5916cd90e75f8789881af40287c655831c5086ae1575b327556b63cdb24.rtf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
malware-samples-master/2018-08-RTF-Byte-Nibble-Obfuscation/3f922fe437a4394c9c35dbf05252ff8fa20e2bbf10eb726ba9398c933c797837.rtf
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
malware-samples-master/2018-08-RTF-Byte-Nibble-Obfuscation/3f922fe437a4394c9c35dbf05252ff8fa20e2bbf10eb726ba9398c933c797837.rtf
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral15
Sample
malware-samples-master/2018-08-RTF-Byte-Nibble-Obfuscation/45a86012cb99762d57d0fe1626d5cdc9046751e26eac7d9ef0e8adedb03b8661.rtf
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
malware-samples-master/2018-08-RTF-Byte-Nibble-Obfuscation/45a86012cb99762d57d0fe1626d5cdc9046751e26eac7d9ef0e8adedb03b8661.rtf
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral17
Sample
malware-samples-master/2018-08-RTF-Byte-Nibble-Obfuscation/48aa32a4490beefc488add66df46b75bbd480af9cedebaa0c096ac216dd08d79.rtf
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
malware-samples-master/2018-08-RTF-Byte-Nibble-Obfuscation/48aa32a4490beefc488add66df46b75bbd480af9cedebaa0c096ac216dd08d79.rtf
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral19
Sample
malware-samples-master/2018-08-RTF-Byte-Nibble-Obfuscation/5484b0f37f21861c480f43c40168d9767bf619dfcd92436193ab7d7aee188fc4.rtf
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
malware-samples-master/2018-08-RTF-Byte-Nibble-Obfuscation/5484b0f37f21861c480f43c40168d9767bf619dfcd92436193ab7d7aee188fc4.rtf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
malware-samples-master/2018-08-RTF-Byte-Nibble-Obfuscation/54b32a37fc521c258da32fd15acb580d03b820ff69977696af5a134edea48f86.rtf
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
malware-samples-master/2018-08-RTF-Byte-Nibble-Obfuscation/54b32a37fc521c258da32fd15acb580d03b820ff69977696af5a134edea48f86.rtf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
malware-samples-master/2018-08-RTF-Byte-Nibble-Obfuscation/62c03c4cd9d94029be4e38c4cbaf934a3a19919fab6ef3561a22f544bc892a2f.rtf
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
malware-samples-master/2018-08-RTF-Byte-Nibble-Obfuscation/62c03c4cd9d94029be4e38c4cbaf934a3a19919fab6ef3561a22f544bc892a2f.rtf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
malware-samples-master/2018-08-RTF-Byte-Nibble-Obfuscation/6e2a271f9e137bc8c62fa304ede3b5bac046f4957d3f8249dde60357463e651d.rtf
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
malware-samples-master/2018-08-RTF-Byte-Nibble-Obfuscation/6e2a271f9e137bc8c62fa304ede3b5bac046f4957d3f8249dde60357463e651d.rtf
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral27
Sample
malware-samples-master/2018-08-RTF-Byte-Nibble-Obfuscation/7532ef45138d57ac4ed9eeec0f62f9edef4447723efde66bffcff38175f6d62d.rtf
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
malware-samples-master/2018-08-RTF-Byte-Nibble-Obfuscation/7532ef45138d57ac4ed9eeec0f62f9edef4447723efde66bffcff38175f6d62d.rtf
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
malware-samples-master/2018-08-RTF-Byte-Nibble-Obfuscation/758a0e300edff045ede857ad4b01c4d51f373add59c43b78047dd69ce4c7765a.rtf
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
malware-samples-master/2018-08-RTF-Byte-Nibble-Obfuscation/758a0e300edff045ede857ad4b01c4d51f373add59c43b78047dd69ce4c7765a.rtf
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral31
Sample
malware-samples-master/2018-08-RTF-Byte-Nibble-Obfuscation/7a0c20c85f01a9d11e2b5f67483d154864b1a1dc8112566df156f8232d38a4d5.rtf
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
malware-samples-master/2018-08-RTF-Byte-Nibble-Obfuscation/7a0c20c85f01a9d11e2b5f67483d154864b1a1dc8112566df156f8232d38a4d5.rtf
Resource
win11ltsc2024-20260706-en
General
- Target malware-samples-master/2018-05-KPOT/36dcd40aee6a42b8733ec3390501502824f570a23640c2c78a788805164f77ce.exe
- Size 74KB
- Sample260709-vbj64ady5l
- SHA256 36dcd40aee6a42b8733ec3390501502824f570a23640c2c78a788805164f77ce
- MD5 45ddc687f88b45fc3fec79f9dc8b38e2
- SHA1 de37b748e0e32d96c31f469f9ba4ea4f11e3e78b
- SHA512 57e7adcb2d59645fe4cf668c2d6d6458ae2b8e5c2f953c936ebc6a4a7a8fbe55f6236d9eef12e92850e386f256f31f564bbb4c365d876fa00dca4cf545c34076
- SSDEEP 1536:K8rlwQrKNFt+InYHYQ2JSYIPf9kHRt7izYSF:nlwQrKHtcPlWRt7iM6
- TLSH T10A73B52732EDBD40D07E433ABFBB52D897BCDD021622E71A6DD9325492362973D112C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3096 36dcd40aee6a42b8733ec3390501502824f570a23640c2c78a788805164f77ce.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\malware-samples-master\2018-05-KPOT\36dcd40aee6a42b8733ec3390501502824f570a23640c2c78a788805164f77ce.exe"C:\Users\Admin\AppData\Local\Temp\malware-samples-master\2018-05-KPOT\36dcd40aee6a42b8733ec3390501502824f570a23640c2c78a788805164f77ce.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3096