Analysis
- max time kernel
150s - max time network
128s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
21/07/2026, 13:06
Static task
static1
Behavioral task
behavioral1
Sample
ET6XW-BIOS-A06-EC-A06.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
ET6XW-BIOS-A06-EC-A06.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
General
- Target ET6XW-BIOS-A06-EC-A06.exe
- Size 32.9MB
- Sample260721-qccfesbr2s
- SHA256 ee0ff5ac0d5f2dd69eea853560ff2b02131002630cb7e4705267be667379f2bf
- MD5 260ee9513f496a864e00ff91e3f2cbe8
- SHA1 770616616bc3ac177fd6c086ac8a098a197566c3
- SHA512 55980236c910512c902af86be6ee4fc8c0829f15e5c3fa5f04a1826753e5c10f8ca7507e8ca2508df90c115bea224e688d579be70c25e78c4aba1bbbc18fef6b
- SSDEEP 393216:Le0YVZ5imCtJTB85RWys9S/GFypNAQ8ZFiv3fis:Le03XJTB85R0kGYDr8biF
- TLSH T16E77F042F7A481F6D4B78130C953972AEAB1BC55132097CB63C4BA976F337A16A3E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Malware Config
Signatures
- Drops file in Drivers directory 2 IoCs
description ioc Process File created C:\Windows\system32\Drivers\inpoutx64.sys ET6XW-BIOS-A06-EC-A06.exe File created C:\Windows\system32\Drivers\PhyMEMCtrl.sys ET6XW-BIOS-A06-EC-A06.exe - Loads dropped DLL 2 IoCs
pid Process 4136 ET6XW-BIOS-A06-EC-A06.exe 4136 ET6XW-BIOS-A06-EC-A06.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4136 ET6XW-BIOS-A06-EC-A06.exe 4136 ET6XW-BIOS-A06-EC-A06.exe - Suspicious behavior: LoadsDriver 2 IoCs
pid Process 812 Process not Found 812 Process not Found
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\PhyMEMCtrlDLL.dll
- Size 164KB
- SHA256 1f14c87f6199901846341834324c27454e4301d79011bec89f325a29ba1be0ee
- MD5 3e0160b538ef0710fbab190c98b48f3e
- SHA1 85f6466f8a859c4890d81025f65eb3be7d465acc
- SHA512 81980f5fc2eb02e4200f4cfb141976c36817e04e86e0041390c6a5a0e9440908a471b92b1268793a5f8f0d1307f06fd75e02ef71b782fdb93fcdb89d6cae7872
- SSDEEP 3072:v6ia0fimurZTR5riNLYsGcqFcu7UApVcjkE8NJ9Re:v6ihaLDaLYtcqLgI7
- TLSH T198F36C5773B500BBE1B38235C9674A46EB76B95107309BDF0394826A1F237D19E3AB31
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\inpoutx64.dll
- Size 520KB
- SHA256 16363e3211e505e975f0bfb64fb673d0546993da99e9d5feb77f72cfab0de771
- MD5 474012ddafaac2609a11ba0cf1d3b2df
- SHA1 02dfad288d37dbf88852f4f78a994f56c5ab5f97
- SHA512 54d3edf3f1010a3a8fae17cb32c1dbfdbae442411f8fad4081915035478c3c96b13ee5bebc87838c6d05f04363bc7dbf16d5b9e0f5d11e9d5089398b68631b42
- SSDEEP 6144:TVe9LLQlZSuPerDlexxsn9qvOimK0ruKYZOnVM8aNQ:4FQl+rDlexxsnqmh2ZKVF8Q
- TLSH T114B48E52A3A503F5E0B7D139C9578E46FAB2B8550B20A7CB03E495B52F237E0563F326
- MD5 SHA1 SHA512 SSDEEP TLSH