Overview
overview
5Static
static
5DeltaExecutor.zip
windows10-2004-x64
1DeltaExecutor.zip
windows11-ltsc_2024-x64
1DeltaExecu...or.exe
windows10-2004-x64
5DeltaExecu...or.exe
windows11-ltsc_2024-x64
5DeltaExecu...-2.dll
windows10-2004-x64
1DeltaExecu...-2.dll
windows11-ltsc_2024-x64
1DeltaExecu...-8.dll
windows10-2004-x64
1DeltaExecu...-8.dll
windows11-ltsc_2024-x64
1DeltaExecu...-0.dll
windows10-2004-x64
1DeltaExecu...-0.dll
windows11-ltsc_2024-x64
1DeltaExecu...-1.dll
windows10-2004-x64
5DeltaExecu...-1.dll
windows11-ltsc_2024-x64
5DeltaExecu...se.dll
windows10-2004-x64
1DeltaExecu...40.dll
windows10-2004-x64
1DeltaExecu...40.dll
windows11-ltsc_2024-x64
1DeltaExecu..._1.dll
windows10-2004-x64
1DeltaExecu..._1.dll
windows11-ltsc_2024-x64
1DeltaExecu...b1.dll
windows10-2004-x64
1DeltaExecu...b1.dll
windows11-ltsc_2024-x64
1Analysis
- max time kernel
150s - max time network
145s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/07/2026, 00:47
Static task
static1
Behavioral task
behavioral1
Sample
DeltaExecutor.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
DeltaExecutor.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
DeltaExecutor/DeltaExecutor.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
DeltaExecutor/DeltaExecutor.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral5
Sample
DeltaExecutor/libiconv-2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
DeltaExecutor/libiconv-2.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
DeltaExecutor/libintl-8.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
DeltaExecutor/libintl-8.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
DeltaExecutor/libpcre2-8-0.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
DeltaExecutor/libpcre2-8-0.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
DeltaExecutor/libwinpthread-1.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
DeltaExecutor/libwinpthread-1.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral13
Sample
DeltaExecutor/ucrtbase.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
DeltaExecutor/vcruntime140.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral15
Sample
DeltaExecutor/vcruntime140.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral16
Sample
DeltaExecutor/vcruntime140_1.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral17
Sample
DeltaExecutor/vcruntime140_1.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral18
Sample
DeltaExecutor/zlib1.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral19
Sample
DeltaExecutor/zlib1.dll
Resource
win11ltsc2024-20260709-en
General
- Target DeltaExecutor/DeltaExecutor.exe
- Size 2.4MB
- Sample260720-a5f2bac12y
- SHA256 6338d76fb8584b3c01acd3e54894a18acdc4991e27cb0ef38bc813048be0426c
- MD5 11681120205a14f8173a4dd80526988c
- SHA1 f91e610277bdf419b6d6a0c504f995b062e7f355
- SHA512 bfd7be6cd25fff773cee9d59c1fe022b5845791428c49f8c8429a7f26f1bceae570a05fd4f851f92dbeea9f8511a52699880303fe2b18e5c59937c1e0bda3e06
- SSDEEP 49152:/odiePhExLauAMPjZ98wotnCh20QlEL6/Ewvl4TxsaNFc5WgkwFI:/Oh+majM4YELDFzrCI
- TLSH T1FEC52917E2A360FCCA6BC134865BA772B971B8580130BE7F5554CB302F71EA0576EB29
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious use of SetThreadContext 1 IoCs
description pid Process procid_target PID 1960 set thread context of 4672 1960 DeltaExecutor.exe 90 - Suspicious use of WriteProcessMemory 6 IoCs
description pid Process procid_target PID 1960 wrote to memory of 4672 1960 DeltaExecutor.exe 90 PID 1960 wrote to memory of 4672 1960 DeltaExecutor.exe 90 PID 1960 wrote to memory of 4672 1960 DeltaExecutor.exe 90 PID 1960 wrote to memory of 4672 1960 DeltaExecutor.exe 90 PID 1960 wrote to memory of 4672 1960 DeltaExecutor.exe 90 PID 1960 wrote to memory of 4672 1960 DeltaExecutor.exe 90
Processes
-
C:\Users\Admin\AppData\Local\Temp\DeltaExecutor\DeltaExecutor.exe"C:\Users\Admin\AppData\Local\Temp\DeltaExecutor\DeltaExecutor.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
PID:1960 -
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ServiceModelReg.exe"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ServiceModelReg.exe"2⤵PID:4672
-