Analysis
- max time kernel
150s - max time network
135s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/07/2026, 18:24
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WinService.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
WinService.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
General
- Target WinService.exe
- Size 1.1MB
- Sample260720-w2a7jsbv8k
- SHA256 d23bb7987c5b71aa46a7d0f04ca772bea800cb0702cf44dc12d7a5e053900734
- MD5 60c9026c2ae0350c0ba85becfa0ff91d
- SHA1 dc6b9b006f751fdf855fe3ceb91b78ec770f5d88
- SHA512 d9e3c231197842e58269354b7c409452d82de6de8a90fe7dd3efc22eeb226eec80d444893978877489dac93298f0b53855ac0248a5b764746f21f2c3ce7ac7c5
- SSDEEP 24576:wsyBPRagzRZVxMGF0cBXVKpsq9AUPEQv:TyBPR1FZVxMGF5BXVKmyV
- TLSH T196354B1BE2B354E8C92BD0748B739772BA30B82945247D2E5EA4EB321F31E505F5E724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Drops startup file 1 IoCs
description ioc Process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\WinSvc.lnk WinService.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Suspicious behavior: EnumeratesProcesses 56 IoCs
pid Process 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe 4584 WinService.exe