c514f703dec50f54c7a63792961c7b11c19a903dd1d2a2bc8c1828bf2b8caab5

Analysis

user interaction
yes
max time kernel
150s
max time network
114s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/07/2026, 10:15

Target
shestep.exe
Size 5.1MB
Sample260710-man5nahw2j
SHA256 c514f703dec50f54c7a63792961c7b11c19a903dd1d2a2bc8c1828bf2b8caab5
MD5 032a6c3a6fd154590be9f824d8b98bae
SHA1 0b9e61db94fa0ff6cacd88f974b5eb3d9f0d8315
SHA512 d8461b3b8c34d64099798c0ec41e6cd2ce5723d6838e99dbe5487caadee1540598107c120546609fcfbc34486d5fc9b2c37ae90133586545f8cc71b8b136ae71
SSDEEP 49152:COsv+70pEf48dcvDU+f8CtIfh7j5FTBfCAz5zfy3yjkMzw12pePdcfudiWcn:CTMVemhLBfCAzxf0Mzw5cfud
TLSH
T1A9463A136DA145E9CC9D9434886792A27B30BC895F7157D72AA0F37C2F7A7D18EBA300
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
4076	shestep.exe

C:\Users\Admin\AppData\Local\Temp\shestep.exe
"C:\Users\Admin\AppData\Local\Temp\shestep.exe"
1⤵
- Suspicious behavior: AddClipboardFormatListener
PID:4076