Analysis
- max time kernel
899s - max time network
463s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
14/07/2026, 04:45
Static task
static1
Behavioral task
behavioral1
Sample
HyperTune.lnk
Resource
win10v2004-20260513-en
1 signatures
900 seconds
Behavioral task
behavioral2
Sample
HyperTune.lnk
Resource
win11ltsc2024-20260709-en
1 signatures
900 seconds
General
- Target HyperTune.lnk
- Size 1KB
- Sample260714-fdg27aev8n
- SHA256 2c274647038fe12a9391eea7dd6b318184a923aa926c220250bbddd6107ed081
- MD5 244387ce33e64d3c4aa438049119464b
- SHA1 3abff997126b2ce0865cd0f75b39bc510d2ede61
- SHA512 15662e699e659e5b70343d0eab8d34c71d64526a70a02f33f8028517f3116da859797f395906c1290a67517f9f47f57e9c57310e8fdfb652d78176828318361f
- TLSH T1BA21F425BEC41825D3FFED7952BB6A25D13EF452DB21250D000A410B1674611EE5AB6F
- MD5 SHA1 SHA512 TLSH
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\HyperTune.lnk1⤵PID:3052
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:2584
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:1000