Analysis
- user interaction
yes - max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
17/07/2026, 18:52
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
VixenCleanerV3.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
VixenCleanerV3.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target VixenCleanerV3.exe
- Size 624KB
- Sample260717-xjfjzsbs8n
- SHA256 2afb06ae517ebd85d50ba56fe2dc17536987f99fb70fcb81eb51747688dd60bb
- MD5 5d45e4e45f2ba72c1ab25d2f23459083
- SHA1 7c69d7f891ca5d682508cad3e475d73d700c2130
- SHA512 5b58b69f5bc996823973e7ee74aab84d76705b134348bdf5379d22b22683f00737069e4319f8c1cbb0b8d2313dd8205c04deac169e0b1c7f63306ce091ef347e
- SSDEEP 6144:/JY17Fhb8cnFVwhl8iKL4T3XnpZ5t6f6S+zv4+mQA6DpNGsCfggyEvK:e1IcQhjKLaHB9k7Q3dNGs1n
- TLSH T1A3D45B1AE6A902F5D0B6D039C542502AFAB2789B9330A3CB97914F5B1F277E45F3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PhysicalDrive0 VixenCleanerV3.exe - Suspicious behavior: EnumeratesProcesses 8 IoCs
pid Process 4760 VixenCleanerV3.exe 4760 VixenCleanerV3.exe 4760 VixenCleanerV3.exe 4760 VixenCleanerV3.exe 4760 VixenCleanerV3.exe 4760 VixenCleanerV3.exe 4760 VixenCleanerV3.exe 4760 VixenCleanerV3.exe