Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
16/07/2026, 16:57
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
80f3a1b91686152350a46915b62e13942e1d39fb57abcae4e2b588f422d679db.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
80f3a1b91686152350a46915b62e13942e1d39fb57abcae4e2b588f422d679db.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target 80f3a1b91686152350a46915b62e13942e1d39fb57abcae4e2b588f422d679db.exe
- Size 1015KB
- Sample260716-vglbcadv3z
- SHA256 80f3a1b91686152350a46915b62e13942e1d39fb57abcae4e2b588f422d679db
- MD5 8ac5ec843beef31ef9129d74510f1c91
- SHA1 c5172c320f7e743ef4cab78b101c2e2efd07daae
- SHA512 3b5e38eb1e7cd512cf8fda98042f60cfb65c6a4363b61b1098dd6175135834e156e224fea22ec8a85aef6465d9df771a238f56013cd0a37e82af9678b2900f38
- SSDEEP 24576:byW9YTGw0oYBJlypTb8gLxgh4leS03w4+l1d/NEaIXq3B:byzTf0oeJlypTbTNgGr03w4+l1diaIa3
- TLSH T1A0256C4973A441ADFEA7E176CA23C607D7B178460277862F01A49B767F337712A2E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 14 IoCs
pid Process 644 80f3a1b91686152350a46915b62e13942e1d39fb57abcae4e2b588f422d679db.exe 644 80f3a1b91686152350a46915b62e13942e1d39fb57abcae4e2b588f422d679db.exe 644 80f3a1b91686152350a46915b62e13942e1d39fb57abcae4e2b588f422d679db.exe 644 80f3a1b91686152350a46915b62e13942e1d39fb57abcae4e2b588f422d679db.exe 644 80f3a1b91686152350a46915b62e13942e1d39fb57abcae4e2b588f422d679db.exe 644 80f3a1b91686152350a46915b62e13942e1d39fb57abcae4e2b588f422d679db.exe 644 80f3a1b91686152350a46915b62e13942e1d39fb57abcae4e2b588f422d679db.exe 644 80f3a1b91686152350a46915b62e13942e1d39fb57abcae4e2b588f422d679db.exe 644 80f3a1b91686152350a46915b62e13942e1d39fb57abcae4e2b588f422d679db.exe 644 80f3a1b91686152350a46915b62e13942e1d39fb57abcae4e2b588f422d679db.exe 644 80f3a1b91686152350a46915b62e13942e1d39fb57abcae4e2b588f422d679db.exe 644 80f3a1b91686152350a46915b62e13942e1d39fb57abcae4e2b588f422d679db.exe 644 80f3a1b91686152350a46915b62e13942e1d39fb57abcae4e2b588f422d679db.exe 644 80f3a1b91686152350a46915b62e13942e1d39fb57abcae4e2b588f422d679db.exe - Suspicious use of SendNotifyMessage 14 IoCs
pid Process 644 80f3a1b91686152350a46915b62e13942e1d39fb57abcae4e2b588f422d679db.exe 644 80f3a1b91686152350a46915b62e13942e1d39fb57abcae4e2b588f422d679db.exe 644 80f3a1b91686152350a46915b62e13942e1d39fb57abcae4e2b588f422d679db.exe 644 80f3a1b91686152350a46915b62e13942e1d39fb57abcae4e2b588f422d679db.exe 644 80f3a1b91686152350a46915b62e13942e1d39fb57abcae4e2b588f422d679db.exe 644 80f3a1b91686152350a46915b62e13942e1d39fb57abcae4e2b588f422d679db.exe 644 80f3a1b91686152350a46915b62e13942e1d39fb57abcae4e2b588f422d679db.exe 644 80f3a1b91686152350a46915b62e13942e1d39fb57abcae4e2b588f422d679db.exe 644 80f3a1b91686152350a46915b62e13942e1d39fb57abcae4e2b588f422d679db.exe 644 80f3a1b91686152350a46915b62e13942e1d39fb57abcae4e2b588f422d679db.exe 644 80f3a1b91686152350a46915b62e13942e1d39fb57abcae4e2b588f422d679db.exe 644 80f3a1b91686152350a46915b62e13942e1d39fb57abcae4e2b588f422d679db.exe 644 80f3a1b91686152350a46915b62e13942e1d39fb57abcae4e2b588f422d679db.exe 644 80f3a1b91686152350a46915b62e13942e1d39fb57abcae4e2b588f422d679db.exe