Analysis
- max time kernel
148s - max time network
132s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
16/07/2026, 16:04
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
37cec31cdec0b4813fba9b1fb067e4dc19ed1a2f1d7ef762ca5796408febe037.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
37cec31cdec0b4813fba9b1fb067e4dc19ed1a2f1d7ef762ca5796408febe037.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 37cec31cdec0b4813fba9b1fb067e4dc19ed1a2f1d7ef762ca5796408febe037.exe
- Size 451KB
- Sample260716-th2jaacx6t
- SHA256 37cec31cdec0b4813fba9b1fb067e4dc19ed1a2f1d7ef762ca5796408febe037
- MD5 e95ef33fdbbe6c2b72ee98317d5da752
- SHA1 b876645b0f7e2b261e64aa8c7c09a4f56789814e
- SHA512 8381cef29db0a5e602290cce35a69fb70d2a62512f42c5cdc1c25a66978592d0fe1403fd4ec270b3c71549be8dc601c684ae33d0ae23b540f1609a716f18027d
- SSDEEP 6144:n8rVC8eNZ2+yiydIMCMnAKfEVMnDiIqkyoGXCkCqam60cg7LZjd27YOt+0y:n+C8F+W2TYEVcy7gATPZjdUPBy
- TLSH T13DA45A6327908CABC6495139C4E6AF34B52EA6B4172683F75F800755DA6AFCC1C31A3F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 4140 wrote to memory of 2376 4140 37cec31cdec0b4813fba9b1fb067e4dc19ed1a2f1d7ef762ca5796408febe037.exe 87
Processes
-
C:\Users\Admin\AppData\Local\Temp\37cec31cdec0b4813fba9b1fb067e4dc19ed1a2f1d7ef762ca5796408febe037.exe"C:\Users\Admin\AppData\Local\Temp\37cec31cdec0b4813fba9b1fb067e4dc19ed1a2f1d7ef762ca5796408febe037.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:4140 -
C:\Windows\SYSTEM32\cmd.execmd.exe /c ""C:\Users\Admin\AppData\Local\Temp\C0XM0VO4.bat" "C:\Users\Admin\AppData\Local\Temp\37cec31cdec0b4813fba9b1fb067e4dc19ed1a2f1d7ef762ca5796408febe037.exe""2⤵PID:2376
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\C0XM0VO4.bat
- Size 46B
- SHA256 1732186a6a57bd36ede6572ff4d74cb926161b5d843e2fb75be3a8c3812e712d
- MD5 02e0c3576093c083770ee843c84ee852
- SHA1 07894d3f67c33211c4270185706d23c30666e759
- SHA512 547033154ac50da36fbb326750bd63f6e7b21eb6480fde1b12577d3551a4c80ea656f55701702f6ce67c59db96644e010fd69b291cf9d85fa58369ecb3ebc43c
- MD5 SHA1 SHA512