Analysis
- user interaction
yes - max time kernel
150s - max time network
133s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
16/07/2026, 17:58
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
IEPwKi6qaK286jcF.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
IEPwKi6qaK286jcF.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
General
- Target IEPwKi6qaK286jcF.exe
- Size 30.9MB
- Sample260716-wkn23set5y
- SHA256 ffab85690742087fd1f84e39645207bfd97855232e2e74c4adcd7e2161e65445
- MD5 f13ff904e4c17d596af71f8a23b2b1fb
- SHA1 3720f19f2e05c587d2239c22e36342cdb8a12ff1
- SHA512 fbe025dd894d4a70398e3d3164b32788f558d1c22fcaeb700195fb76f32ad3e636bbae77c75c28e680fe1657694bea1555562ffc3de8d6b79ba686f8ebdcd813
- SSDEEP 196608:Q9Ml6vYQ8VvPeb1UBDglPC0Y/OnFt7yO7uq5EvKq07kUM:QB8VvPeb1ADOC0Y/OnFt7yOBEO7kUM
- TLSH T1886796215B4D8745D126BD3CD0874A01D3F5BF88C32E8F1F9BE08CE9669B6427A1EA4D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PhysicalDrive0 IEPwKi6qaK286jcF.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 6136 IEPwKi6qaK286jcF.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 6136 IEPwKi6qaK286jcF.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\loader.log
- Size 120B
- SHA256 8631cdd4ed57af801d523e2e97420d92f8ced8c73b39f44579a64bf7b0dd9715
- MD5 b752544b7db2bb6d6081420e77f51504
- SHA1 7d4e7b8a33214d4f2e08f8a50b57246b746320de
- SHA512 5d2a45439c8f25113a0efcaab054fd4d07cd47a47abf43702b0cc413f536712caf1682f5de8a48220075dbe5dd09edf45de8cab6e4cc1464a350d4425d7b7105
- TLSH T18CB012A9F44562FC32733124E081F6B42B30241AA065383C93CE361A7156BAF2377082
- MD5 SHA1 SHA512 TLSH