Analysis
- max time kernel
150s - max time network
116s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
18/07/2026, 12:15
Static task
static1
Behavioral task
behavioral1
Sample
HitmanPro_x64.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
HitmanPro_x64.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
General
- Target HitmanPro_x64.exe
- Size 14.0MB
- Sample260718-pe8e7sa17k
- SHA256 76cf297cfe3f64e872d8994d5ba758a42000f50b70c1f757076d61a67d667bd9
- MD5 de4bcdd57d1d6f3dd5114146549dea75
- SHA1 e331322b5e1e050ef9cadaadbf3a4cb2e4451ef8
- SHA512 89a8507c841395cb060a894c2bd384a296efe708266a7284869f19ed532441aff71a591add05258282251ea4e5b900a6f9489774836ffd2bde32dd99fc5cea96
- SSDEEP 196608:slfrWaowXpUwjWBiex0biN58NKmw6yimq5tTuS9J3O6JfY9beKSL/JI:4fiaowXpUpEv25MJFjrTuSne6JFtJI
- TLSH T1EAE6BE0377F90194E1B396389AB24162EA73BC554B38C6EF11A6524E5F73EE08D39723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
Malware Config
Signatures
- Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Suspicious behavior: EnumeratesProcesses 8 IoCs
pid Process 3192 HitmanPro_x64.exe 3192 HitmanPro_x64.exe 3192 HitmanPro_x64.exe 3192 HitmanPro_x64.exe 3192 HitmanPro_x64.exe 3192 HitmanPro_x64.exe 3192 HitmanPro_x64.exe 3192 HitmanPro_x64.exe - Suspicious use of FindShellTrayWindow 3 IoCs
pid Process 3192 HitmanPro_x64.exe 3192 HitmanPro_x64.exe 3192 HitmanPro_x64.exe - Suspicious use of SendNotifyMessage 3 IoCs
pid Process 3192 HitmanPro_x64.exe 3192 HitmanPro_x64.exe 3192 HitmanPro_x64.exe